On 30 Jul 99, at 9:07, Dean A. Luethje wrote:
> After checking through the MS Support articles, I came across a few that
> seem to address this issue. They indicate that the Netlogon function sends a
> NetBIOS datagram which has both the IP header IP address and a NetBIOS
> header source IP address. Since the logon process uses the NetBIOS header
> source address, if NAT only translates the IP header address, the logon will
> fail. This seems to be exactly what is happening.
Protocols that do this tend to have problems with NAT....
> Does anyone know of a NAT product that translates the NetBIOS addresses as
> well as the IP header addresses? Or is there another way to approach this
> problem?
I believe Microsoft's recommendation would be to use their VPN/PPTP
components, so that a virtal interface on the Win98 machine would have a
192.168.1.x address and a tunnel through the firewall, to some NT Server
running RRAS with VPN support which acts basically as its proxy.
[There have been some poublished flaws in Microsoft's PPTP, so you might
prefer some third-party VPN approach.]
David G
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
