🚀 go-pugleaf

ccgavin@brolga.cc.uq.oz.au (Gavin Stone-Tolcher) writes:
>If they see zones, won't they see the services offered in those zones? I 
>don't want a student lab to be able to use any appletalk services 
>(ie. file/print) except those offered from the file server servicing those
>zones. If was told that forwarding/routing may be turned off in the appletalk
>that comes with 4.10. Can anyone confirm this?

You are probably talking about MPR (Multi Protocol Router) that comes
bundled with 4.1.  I *assume* it can do this, but cannot confirm it.

If they see the zones, then yes, they can use the services offered in
those zones.  A cheesy way of preventing this is using (I think) a "~"
(tilde) in front of the names.  It then becomes hidden and does not sho
up.  It's been a while since I did this, so don't quote me on it.

The ideal solution (which MPR may or may not offer) is protocol
filtering.  It will stop any and all AppleTalk packets from going out to
the rest of your world.  A better solution may be a router that can
filter out certain zones in their ZIP (zone information protocol).  ATPS
has the ability to limit the printer availability by specifying which
zone it should be in.  But you probably want something more than than.

Bottom line:  See what MPR can/cannot do for you.


 ---------------------------------------------------------------------------
| Hansang Bae, CNE  | Be like a duck.  Above the surface, look composed and |
| hbae@primenet.com | unruffled.  But below the surface, paddle like hell!  |
 ---------------------------------------------------------------------------