🚀 go-pugleaf

Chris Kleiman wrote:
> 
> H J Lu wrote:
> ><snip>
> > 4. To access our Class C network from the outside, we should be able to
> >    login on the firewall machine and go from there.
> >
> > H.J.
> 
> quite frankly, I'd be reluctant to let any access through the firewall.
> the last place I worked at went with a separate dial-in connection
> instead; nothing was allowed through the firewall, and that was exactly
> the way I liked it.  You can set up a decent ISDN dial-in solution w/out
> exposing your firewall; unless your doing a lot of long distance calls,
> that's what I would recommend, for what it's worth.;-)
> 
> Fefe Kleiman
> *NOT* a net guru


You still have to be careful.  A dial-in solution can still allow
a hacker to get access to your LAN and files, etc.  One advantage
is you could require a preset call-back before the connection is
allowed.  At least that way you know for sure what number you're
connecting to.  The firewall if done correctly offers good security.
The dial-in option can also be good, but you have to be sure the
users don't take shortcuts and diable some of the security
features.  With the firewall, good software will allow outbound
connections and even allow you to take down TCP/IP (if possible)
and run IPX/SPX for added security.