🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.dcom.lans.misc
Article #383

Can I do this?

#383
From: Lawrence "The Dreamer" Chen
Date: Thu, 08 Jun 1995 00:00
35 lines
2632 bytes
How should I describe this?

Well, do to various existing network requirements/policies....breaking out
office into subnets isn't practical.  But, NIC has only give us one class
C address block (which is reasonable).  The plan is to set the office up
with a (bastion) firewall on a FreeBSD host (and connect to the Internet
using a Netblazer PN4).

Can the internal, protected network continue to run with its non-connected
IP address block?  Could it run with a non-NIC approved address block (they
call it a non-connected IP address, but somehow I think its not quite...
what's the RFC?  They said if it isn't, to blame it on the UNIX manual
they reference with the network was first set up.)

I'm guessing that since the Firewall doesn't route packets from one network
to the other...that its okay.  Would probably not be wise to run the name
server for the internal network on the same machine....but how would I set
it up them?

If the office would let me change all the machines on the LAN to the IP
address, a screened host firewall would be my solution.

But, my question here is what if in the wall between me and management's
policy/requirements making my job difficult....is how do I make this work?

My head hurts again.....I'm going to take a nap and then head back to the
office. 8-)

-- 
 "Just a Crazy Engineer with an Amiga and an HP48sx"    - The Dreamer
 Email: dreamer@lhaven.uumh.ab.ca    or    "Lawrence Chen" @ 1:134/3002
 PHONE: +1 403 526 6019      FAX: +1 403 529 5102       CIS: 74200,2431
 Praxis Society K12 BBS: +1 403 529 1610 Lunatic Haven: +1 403 526 6957
 Packet: VE6LKC @ VE6PAQ.#SAB.AB.CAN.NA
                            Coming Soon, Medicine Hat Community Network
Technical Details
Message-ID: <lOCOw*CpB1@lhaven.UUmh.Ab.Ca>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10ba05,cd9bad625eadf23e,start
X-Google-Attributes: gid10ba05,public
X-Google-Thread: 10952f,cd9bad625eadf23e,start
X-Google-Attributes: gid10952f,public
X-Google-Thread: f73eb,cd9bad625eadf23e,start
X-Google-Attributes: gidf73eb,public
X-Google-Thread: 11109d,cd9bad625eadf23e,start
X-Google-Attributes: gid11109d,public
From: dreamer@lhaven.UUmh.Ab.Ca (Lawrence "The Dreamer" Chen)
Subject: Can I do this?
Date: 1995/06/08
Message-ID: <lOCOw*CpB1@lhaven.UUmh.Ab.Ca>
X-Deja-AN: 104045602
distribution: world
followup-to: poster
summary: Can a hide an IP network and still connect to the Internet?
organization: Lunatic Haven Information Systems
keywords: Firewall IP Netblazer FreeBSD
reply-to: lawrence@combdyn.com
newsgroups: comp.dcom.lans.misc,comp.security.unix,comp.unix.freebsd.misc,biz.comp.telebit.netblazer