On Thu, 10 Jun 1999, Simon Buchanan wrote:
> then you can allow
> plain-appletalk direct access to this mac via the Mac OS file-sharing
> for any admin type stuff.
Yes, but then you don't need to have it on the esxtermnal network at all.
> Is there any way of 'switching' netatalk off the 'external' network all
> together?
I think the following is at least what you want:
Internal Net ---- External Net ---- I-Net
Macs File Server
File Servers (with TCP wrappers)
What you (?) have now is probably this:
Macs Macs
File Servers File Servers
Gateway Router
Even TCP wrappers won't help much you against attacks on your Macs.
Tom
