On Fri, 2003-12-05 at 20:47, Kevin Saenz wrote:
> Doh!!! I didn't read the h----u----b bit.
> 
> I agree your firewall will be as useful as the proverbial
> bits on a bull. :)
> 

Because the adsl modem is set to bridge mode the only way in and out of
it is by PPPoE, right? So that means also that the only way for someone
from the outside to access the network is via the PPPoE client?
The only machine with a PPPoE client installed is the firewall, and all
of the other machines use the firewall as their gateway to the net.

Why would that not be secure?

> > Hi,
> > 
> > if all machines are connected to the hub, then the firewall
> > is not being used and is redundant, thus probably not providing
> > the security you wish it was.
> > 
> > perhaps it should be thus:
> > 
> > ADSL modem <--> firewall <---> hub <--> local workstation #1
> >                                hub <--> local workstation #2 etc
> > 
> > whereas your diagram seems to indicate :
> > 
> > ADSL modem <--> hub <---> firewall
> >                 hub <---> local workstation #1
> >                 hub <---> local workstation #2 etc
> > 
> > If i've overlooked something or can assist, let me know, cheers
> > 
> > kind regards,
> > Norman
> > 
> > On Fri, 5 Dec 2003, Karl Bowden wrote:
> > 
> > > I got a Billon 7100 from www.computeronline.com.au and although the
> > > firmware is a bit flakey at startup, once going it works well, I
> > > dispensed with the units NAT etc, and just run it in bridged mode
> > > connected to the firewall. It does not have a hub builtin, but I just
> > > plugged it into the existing hub. I also have the unit connected to the
> > > firewall through the existing hub and am just running pppoe over that
> > > eg:
> > >
> > >       ADSL Modem    Firewall   Local Workstations
> > >           |            |          |          |
> > >           +-----H------+----U-----+----B-----+
> > >
> > > Does anyone know if this will have any side effects on the security of
> > > my network?
> > >
> > >  - Karl
> > 
> > -- 
> > Epsilon-6!                         Ph:+612 8807-4780   Fax: +612 8807-4498
> > E-Solutions for BSD and Linux               http://www.paladincorp.com.au/
> > This e-mail and any files transmitted with it are confidential and intended
> > solely for the use of the individual or entity to whom they are addressed.
> -- 
> Regards,
> 
> Kevin Saenz
>  
> Spinaweb
> I.T consultants
>  
> Ph: 02 4620 5130
> Fax: 02 4625 9243
> Mobile: 0418455661
> Web: http://www.spinaweb.com.au


-- 
SLUG - Sydney Linux User's Group - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to