At 12:07 PM 2/12/2004 -0500, Earl Wilson wrote:
To Review:

Upon your suggestions concerning DNS - the culprit was 2 fold:

1.) MSN (and all other M$ websites) seemed to have taken away the
ability to successfully ping them (right on the money, Charles) - I had
no problems when I pinged the ip addresses of Google and Yahoo;

2) The DNS issue was my /etc/resolv.conf file on the RH box; the only
nameservers listed were on the internal network. Once I added my ISP's
nameservers to this file, I was able to ping and browse by ip AND name.
I assume that due to the fact that the rh box is now using the ipmasq
abilities  of the Dachstein box, that the rh box still has firewall
protection (please correct me if I'm wrong on this statement).
[rest deleted]

The Dach host will provide firewall protection to the RH host (indeed, to all LAN hosts ... probably your Windows ME host is intrinsically more vulnerable than the RH host, unless you've been fanatically conscientious about applying MS scurity patches) with respect to the Internet ... but not with respect to other hosts on the LAN.

This qualification is perhaps obvious, but sometimes it is useful to say the things we think "go without saying" ... just to avoid confusion down the road. If there is a risk of compromise by direct access to your LAN -- for example, if it ran a WiFi AP, or if it was a large enough installation that it had some unguarded Ethernet connections -- you'd want to protect LAN hosts from on-LAN attacks as well ... and you can't do that at the router. From your descriptions, I'd guess that you don't face this problem right now.





-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to