🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: de.comm.internet
Article #393

Re: Unique internet IP adr. without changing local IPs ?

#393
From: Marcus J. "will do TCP/IP for fo...
Date: Fri, 17 Jul 1992 18:42
36 lines
3090 bytes
>In our company we have decided to connect to the world wide internet.
>Therefore I think we have to apply for a world wide unique IP
>address. My problem is, if we get this IP address we don't want to
>change all our local IP addresses we are using now. But if we don't
>act this way then we have local IP addresses which are matching IP
>addresses on the internet.

	I've set a few of our customers up like this for exactly the
reason you describe. We do it as part of our internet firewall offering,
which includes a routing configuration that isolates all routes between
the internal network and the internet.
	As a result, internal nodes with addresses that are "illegal"
are hidden and don't cause any problems. Of course, when someone
tries to do mail or file transfer through the firewall, they run into
problems and are politely encouraged to "get an address".
	At least the private network gets to make a slow transition
and cut-over to a real addressing scheme rather than having to change
everything all at once.
	Basically, what you do is set up an isolating subnet and show
a route to it to the internet. (like 192.5.214, which is one of my
isolated subnets) The host(s) on that net act as nameservers and
mail exchangers, and run FTP and telnet gateways that allow internal
systems access out. Routes to the isolated subnet are also given
to internal hosts, so they can mail out and whatnot. Internal systems
never get a route to the internet, just to the isolating subnet -
there is no direct exchange of data between the two networks - all
data has to go through the "gatekeeper" on the isolated subnet.
	I have a paper on how we do this that I'm presenting at
FEDunix. I can put a copy of the file up for FTP, I guess.

mjr.
-- 
	There are only ~17,000 possible three-letter acronyms left for possible
products. When the current supply runs out, in 1994, the computer industry will
transition to a ten-letter product acronym scheme that can support naming of
products and vaporware well into the year 2,000.	-notebooks of a heretic
Technical Details
Message-ID: <1992Jul17.184214.26395@decuac.dec.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!think.com!ames!haven.umd.edu!decuac!hussar.dco.dec.com!mjr
References: <1992Jul16.145850.1980@edfd.uucp>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f9325,1728c11e377be3d8
X-Google-Attributes: gidf9325,public
X-Google-Thread: 1048b3,1728c11e377be3d8
X-Google-Attributes: gid1048b3,public
X-Google-Thread: 10b574,1728c11e377be3d8
X-Google-Attributes: gid10b574,public
X-Google-ArrivalTime: 1992-07-17 08:14:34 PST
Path: arc1-ca.pugleaf.net!sparky!uunet!spool.mu.edu!think.com!ames!haven.umd.edu!decuac!hussar.dco.dec.com!mjr
From: mjr@hussar.dco.dec.com (Marcus J. "will do TCP/IP for food" Ranum)
Newsgroups: de.comm.internet,comp.protocols.tcp-ip,eunet.misc
Subject: Re: Unique internet IP adr. without changing local IPs ?
Keywords: internet IP
Message-ID: <1992Jul17.184214.26395@decuac.dec.com>
Date: 17 Jul 92 18:42:14 GMT
Article-I.D.: decuac.1992Jul17.184214.26395
References: <1992Jul16.145850.1980@edfd.uucp>
Sender: news@decuac.dec.com (USENET News System)
Organization: Digital Equipment Corporation, Washington ULTRIX Resource Center
Lines: 36
Nntp-Posting-Host: hussar.dco.dec.com