On Fri, 4 Apr 2003, Nick Rout wrote:

...
> Often the proprietary routers like the nokia have problems with certain
> protocols, making stuff like netmeeting (H323) and IPSEC VPN's a real
> problem [1]. If you want to get into that stuff you really want to be
> doing your firewalling on something you can control yourself, not
> something that nokia/whoever  has tied up for you.

Does the Nokia not have a built-in network management interface
(accessible either via the Ethernet port, or even a dedicated RS-232
terminal port)? I have not played with ADSL modems recently, but the
ones I had several years ago had a management MMI which allowed all
kinds of details to be configured.

> The answer is to get something where you get the internet IP address on
> a linux or BSD box, and then firewall and NAT and route and ipsec and
> h323 to your hearts content.

Yes, if the modem / router is really not configurable. A 486 with
relatively small memory will do perfectly all right as firewall. You
could even run the firewall on your workstation, but for security
reasons a separate box might be the preferred solution.

Cheers,

Helmut.

+----------------+
| Helmut Walle   |
| [EMAIL PROTECTED] |
+----------------+

Reply via email to