RE: [NF] What are people doing with cable interfaces?

2006-11-08 Thread Jim Felton
Sorry Pete, this was pointed at Whil
Jim

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf
Of Pete Theisen
Sent:   Tuesday, November 07, 2006 1:45 PM
To: ProFox Email List
Subject:Re: [NF] What are people doing with cable interfaces?

On Tuesday 07 November 2006 09:41, Whil Hentzen (Pro*) wrote:


Hi Whil!

An old PC will do - even a 486, and the Linux ones can run off of a floppy.
>
> But that means I need another PC. And four more cards. Suddenly we're
> talking a few hundred bucks. :)

--
Regards,

Pete
http://www.pete-theisen.com/


[excessive quoting removed by server]

___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


RE: [NF] What are people doing with cable interfaces?

2006-11-08 Thread Jim Felton
If you look around the 10/100 NICs can be had for about $10.00 each, the
100/1000 for about $50.00, an old Pentium(anything w 32mb ram) $50.oo bucks,
the time it takes to make it work PRICELESS. It's just an option, if you
don't like don't use it.

Jim

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf
Of Pete Theisen
Sent:   Tuesday, November 07, 2006 1:45 PM
To: ProFox Email List
Subject:    Re: [NF] What are people doing with cable interfaces?

On Tuesday 07 November 2006 09:41, Whil Hentzen (Pro*) wrote:


Hi Whil!

An old PC will do - even a 486, and the Linux ones can run off of a floppy.
>
> But that means I need another PC. And four more cards. Suddenly we're
> talking a few hundred bucks. :)

--
Regards,

Pete
http://www.pete-theisen.com/


[excessive quoting removed by server]

___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Ted Roche
On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>
> BTW, CM is from Frederic, WI.
>

http://www.letsmakeadeal.com/carol.htm

-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Pete Theisen
On Tuesday 07 November 2006 09:41, Whil Hentzen (Pro*) wrote:


Hi Whil!

An old PC will do - even a 486, and the Linux ones can run off of a floppy.
>
> But that means I need another PC. And four more cards. Suddenly we're
> talking a few hundred bucks. :)

-- 
Regards,

Pete
http://www.pete-theisen.com/


___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Whil Hentzen (Pro*)
Ted Roche wrote:
> On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>> 2. I could ignore three of the Eth ports, plug a firewall into the
>> fourth, and then plug the other end of the firewall into a
>> router/switch/hub/xmas tree, and then hook my four PCs into
>> aforementioned router/switch/hub. I could go past four PCs if I wanted
>> to NAT on one of the four static IPs, of course, like I do with my T1 now.
>>
> 
> That would be my recommendation.
> 
>> Conclusion: I think Door #2 is where I'm headed, but I'm still open to
>> other ideas.
> 
> I'm wondering what's behind the curtain where Carol Merrill is standing.

There's a curtain there? All I saw was Carol.

BTW, CM is from Frederic, WI.

http://en.wikipedia.org/wiki/Frederic,_Wisconsin

Whil




___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Whil Hentzen (Pro*)
Ted Roche wrote:
> On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>> OK, you got me. "I don't know."
>>
> 
> Ah! So, now we have an answer: NULL. I like that a lot better than
> EMPTY() or BLANK.






___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Ted Roche
On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>
> 2. I could ignore three of the Eth ports, plug a firewall into the
> fourth, and then plug the other end of the firewall into a
> router/switch/hub/xmas tree, and then hook my four PCs into
> aforementioned router/switch/hub. I could go past four PCs if I wanted
> to NAT on one of the four static IPs, of course, like I do with my T1 now.
>

That would be my recommendation.

> Conclusion: I think Door #2 is where I'm headed, but I'm still open to
> other ideas.

I'm wondering what's behind the curtain where Carol Merrill is standing.

-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Ted Roche
On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>
> OK, you got me. "I don't know."
>

Ah! So, now we have an answer: NULL. I like that a lot better than
EMPTY() or BLANK.

-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Whil Hentzen (Pro*)
Ted Roche wrote:
> On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
>> I've just acquired a line with Time-Warner BizClass. The rationale
>> behind it, let's leave that for another time. 
>>
> 
> So, you've bought a new connection, and you're not going to tell us
> why, 

I didn't say I "bought" it. And I didn't say I wasn't going to to tell 
you why, just not NOW. Stop putting words in my mouth. I already have a 
wife. 

or what you plan to use it for, but now you want us to explain to
> you how to set it up?

As Ethan Hunt says in MI, "It's much worse than that."

Actually, there are two reasons...

First, remember the scene in Cheers where Sam is making mistakes 
ordering things, and one day, a delivery guy drops off a stack of 2x4s, 
a dozen bags of concrete, and a wheelbarrow? Woody bids the guy goodbye 
after the requisite spirited exchange, then closes the door, looks at 
all this stuff in the middle of the bar floor, and says, "Well, now 
the only question left is... what am I going to build?"

Same thing here - I have a line. What might I do with it?

Second, I didn't want to predispose the answers. It's a long held truth 
that in survey taking, you first ask, "Tell us everything you liked 
about X." followed by "Tell us everything you disliked about X." Instead 
of "Please rate the following nine items on a scale of 1 to 5." If you 
provide stock answers, you automatically narrow down the answers you're 
going to get, without necessarily meaning to.

So instead of leading people to the answers I wanted them to provide, I 
wanted a wide open field.

Third, I do not know. I might use this as a spare access line in the 
event that the T1 goes down. I might use it as my main access line, 
ridding the T1 when contract time comes up. I might use it as a test 
line. I might move my T1 hosting to this line. I might decide it's a 
piece o' crap and get rid of it. I do not know. I was looking for a 
variety of possibilities. :)

So there are my two reasons. 

>> At the end of the line coming in from out-of-doors, there's a box the
>> size of maybe six decks of playing cards. The line goes into it, and
>> there are four Ethernet ports available.
> 
> Does the box have a name, or writing on the outside that tells us the
> manufacturer or the model number? Using that information, we can
> probably find the manual on-line and figure out what the capabilities
> of the device are. For now, let's call it "the router."

It's grey. Does that help?

Well, actually, it's a dark grey. Almost a dull black.

Shiny on the front, too.

Seriously, the box has NO markings, numbers, any ID whatsoever on it. 
It's small, grey, has six holes on the back (power, 4xEth, USB). Four 
stickers on the bottom that say "Cable RF Mac Add 20957297348" and a 
fifth that says that Time Warner will throw me in jail and pull out my 
fingernails if I even think about screwing with the box.

Hence my confusion.

And I like my fingernails.

>> Tech support says that only one
>> is active, but I don't quite believe him, as I can plug a box into any
>> of them and get out.
> 
> Tech support may not know what you were provisioned.

Then they're not actually 'tech support', right? I did have to give them 
my account number, and they were able to tell me what my reverse DNS 
was. I'm expecting that they should know what they delivered to me, else 
what support are they going to be able to provide. Refer to previous 
email re MSFT vs Leafe tech support. 

>> I've got four static IP addresses.
> 
> Is that what you ordered, or have you confirmed that's what you have?
> How did you determine that?

Well, cuz that's what I ordered, and I done went ahead and believed 
them. The bastards! Oh, I feel like such a foole!

Oh, I also plugged a machine in, popped in my static IPs (below), and 
verified that all four do get out to the Web, and report back via 
www.myipaddress.com. I have a Web server on one of the IPs, and can 
http:/1.2.3.4 to the server from 1.2.3.5 successfully.

> Since you can plug a box in and get to the internet, what IP address
> do you get? That's likely showing you that the box is handing out IP
> addresses, using DHCP, and it's likely the addresses are non-routeable
> (192.168.*.* or 10.0.0.*) and the box is using NAT and perhaps doing
> some firewalling. But you tell us: what's the output of ifconfig and
> route?

I have a block of 4 IPs, 1.2.3.4 through 1.2.3.7. (I think that's four, 
right?) I lack the self-confidence that many of you have in trusting 
your HCPs to Mr. Dynamic, and so always statically assign IPs to boxen. 
So I entered 1.2.3.4 into my static IP for a test box. 
www.myipaddress.com says I'm on 1.2.3.4. If I do that for 1.2.3.7, I get 
a similar, warm and fuzzy response.

So I that's why I think I'm just getting access to the outside, and my 
PC needs to provide a firewall - or I need to do 'something else'.

>> I'm guessing this box-like thingee is a 'cable modem'. All it provides
>> is access o

RE: [NF] What are people doing with cable interfaces?

2006-11-07 Thread mrgmhale
> I see that Gil has a message that's going to take me
most of the day to digest. 


Yep, I figured if you had time enough to mess around with trying new things
out you may as well have something to idle time away when you start to bang
your head against the wall.

As an aside, I use a SonicWall Pro 200, and most of my clients use SonicWall
for their firewall/VPN solution (largely at my recommendation).  I like
SonicWalls for lots of reasons, mainly because they offer so much bang for
less bucks than Cisco.  If you have 2 SonicWall units (if I read your eMail
correctly re: one behind each T1), with a single WAN port you can use one as
a failover for the other.  I have that set up at one client location, and it
works real slick.  It was a little tricky to set up, until I read the F'ing
manual .  But once set it works like a charm.

Ciao!

Gil

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Whil Hentzen (Pro*)
> Sent: Tuesday, November 07, 2006 9:42 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [NF] What are people doing with cable interfaces?
>
>
> Jim Felton wrote:
> > I'm wonder how you are dealing with the two T1 lines and how
> many IPs you
> > had.
>
> I have a big ol' SonicWall sitting between me and the bad guys on each
> of my T1s. It's OK, although I don't care for their nickel and dime
> attitude every time you want to push another button on their interface.
> For industrial use the $110 a year is OK, I guess.
>
> If you had 4 IPs why not do the same thing you are now?  A possible
> > solution would be to put 5 NICs in PC, Use 4 (100Mb) to attach
> to the RR and
>
> Well, I'm trying to learn something new is one big reason. Another is
> that I'm considering dumping the T1s to see if I can live on much less
> expensive BizClass lines. (Oh, shit, I bet Big Brother just saw that and
> I'm going to get a call from My Friendly AT&T rep any moment now...
> kinda like the way IBM would strongarm you if they heard you were
> considering Someone Else's computer back in the 6/7/80s.)
>
> > the 5th (Gigabyte card) to attach to your Switch on your
> Intranet.  You can
> > run the firewall, active virus, ... on the PC and forward the
> unique IPs to
>
> But that means I need another PC. And four more cards. Suddenly we're
> talking a few hundred bucks. :)
>
> And while I guess a lot of folks have oodles of old PCs laying around,
> I'm actually using all my old PCs. A four year old is VERY forgiving
> about performance if it means he's got his OWN computer. :)
>
> (Running SuSE 10.1, by the way, sorry to burst your bubble, Virgil. :))
>
> > the system you want on you net.  This is basically a cheap
> multi port router
> > with all the options you want to load.  There are many free Linux router
> > packages out there that can even run from a floppy.
>
> But the bottom line is what you're saying is to configure a PC as a
> router/firewall. Yup, that's one possibility Let's see what else
> folks have to say. I see that Gil has a message that's going to take me
> most of the day to digest. 
>
> Whil
>
> > Jim
> >
> >  -Original Message-
> > From:   [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]  On Behalf
> Of Whil Hentzen (Pro*)
> Sent: Tuesday, November 07, 2006 6:57 AM
> To:   profox@leafe.com
> Subject:  [NF] What are people doing with cable interfaces?
>
> I've just acquired a line with Time-Warner BizClass. The rationale
> behind it, let's leave that for another time. 
>
> So now I've got some pretty basic questions I've been spoiled for so
> long, with a pair of T1s coming into the house right next to this TW
> line... Kind of like the frustration at having to deal with a dial-up. 
>
> Anyways, the fellow who installed it wasn't terribly helpful (BIG
> SURPRISE), nor were the folks on the other end of tech support. But
> that's OK, I can experiment.
>
> At the end of the line coming in from out-of-doors, there's a box the
> size of maybe six decks of playing cards. The line goes into it, and
> there are four Ethernet ports available. Tech support says that only one
> is active, but I don't quite believe him, as I can plug a box into any
> of them and get out. I've got four static IP addresses.
>
> I'm guessing this box-like thingee is a 'cable modem'. All it provides
> is access outside. No firewall, no nothing, right?
>
> So what do I do now? 
>
> I could hook up a single box that's running a firewall as well. Block
> everything but 80, for example.
>
> I could hook up four boxe

Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Whil Hentzen (Pro*)
Jim Felton wrote:
> I'm wonder how you are dealing with the two T1 lines and how many IPs you
> had.  

I have a big ol' SonicWall sitting between me and the bad guys on each 
of my T1s. It's OK, although I don't care for their nickel and dime 
attitude every time you want to push another button on their interface. 
For industrial use the $110 a year is OK, I guess.

If you had 4 IPs why not do the same thing you are now?  A possible
> solution would be to put 5 NICs in PC, Use 4 (100Mb) to attach to the RR and

Well, I'm trying to learn something new is one big reason. Another is 
that I'm considering dumping the T1s to see if I can live on much less 
expensive BizClass lines. (Oh, shit, I bet Big Brother just saw that and 
I'm going to get a call from My Friendly AT&T rep any moment now... 
kinda like the way IBM would strongarm you if they heard you were 
considering Someone Else's computer back in the 6/7/80s.)

> the 5th (Gigabyte card) to attach to your Switch on your Intranet.  You can
> run the firewall, active virus, ... on the PC and forward the unique IPs to

But that means I need another PC. And four more cards. Suddenly we're 
talking a few hundred bucks. :)

And while I guess a lot of folks have oodles of old PCs laying around, 
I'm actually using all my old PCs. A four year old is VERY forgiving 
about performance if it means he's got his OWN computer. :)

(Running SuSE 10.1, by the way, sorry to burst your bubble, Virgil. :))

> the system you want on you net.  This is basically a cheap multi port router
> with all the options you want to load.  There are many free Linux router
> packages out there that can even run from a floppy.

But the bottom line is what you're saying is to configure a PC as a 
router/firewall. Yup, that's one possibility Let's see what else 
folks have to say. I see that Gil has a message that's going to take me 
most of the day to digest. 

Whil

> Jim
> 
>  -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf
> Of Whil Hentzen (Pro*)
> Sent: Tuesday, November 07, 2006 6:57 AM
> To:   profox@leafe.com
> Subject:  [NF] What are people doing with cable interfaces?
> 
> I've just acquired a line with Time-Warner BizClass. The rationale
> behind it, let's leave that for another time. 
> 
> So now I've got some pretty basic questions I've been spoiled for so
> long, with a pair of T1s coming into the house right next to this TW
> line... Kind of like the frustration at having to deal with a dial-up. 
> 
> Anyways, the fellow who installed it wasn't terribly helpful (BIG
> SURPRISE), nor were the folks on the other end of tech support. But
> that's OK, I can experiment.
> 
> At the end of the line coming in from out-of-doors, there's a box the
> size of maybe six decks of playing cards. The line goes into it, and
> there are four Ethernet ports available. Tech support says that only one
> is active, but I don't quite believe him, as I can plug a box into any
> of them and get out. I've got four static IP addresses.
> 
> I'm guessing this box-like thingee is a 'cable modem'. All it provides
> is access outside. No firewall, no nothing, right?
> 
> So what do I do now? 
> 
> I could hook up a single box that's running a firewall as well. Block
> everything but 80, for example.
> 
> I could hook up four boxes, too. But I'm not sure I'm comfortable having
> to mess with four firewalls on four boxes; that begins to become a lot
> of admin that I should be able to handle in a central point.
> 
> So I could also plug a firewall into one of the cable modem ports, then
> a hub into the other side of the firewall, and plug boxen into the hub.
> 
> JUST CAN'T DECIDE!!
> 
> So what are y'all doing with a setup like this?
> 
> Whil
> 
> 
[excessive quoting removed by server]

___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


Re: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Ted Roche
On 11/7/06, Whil Hentzen (Pro*) <[EMAIL PROTECTED]> wrote:
> I've just acquired a line with Time-Warner BizClass. The rationale
> behind it, let's leave that for another time. 
>

So, you've bought a new connection, and you're not going to tell us
why, or what you plan to use it for, but now you want us to explain to
you how to set it up?

> At the end of the line coming in from out-of-doors, there's a box the
> size of maybe six decks of playing cards. The line goes into it, and
> there are four Ethernet ports available.

Does the box have a name, or writing on the outside that tells us the
manufacturer or the model number? Using that information, we can
probably find the manual on-line and figure out what the capabilities
of the device are. For now, let's call it "the router."

> Tech support says that only one
> is active, but I don't quite believe him, as I can plug a box into any
> of them and get out.
>

Tech support may not know what you were provisioned.

> I've got four static IP addresses.

Is that what you ordered, or have you confirmed that's what you have?
How did you determine that?

Since you can plug a box in and get to the internet, what IP address
do you get? That's likely showing you that the box is handing out IP
addresses, using DHCP, and it's likely the addresses are non-routeable
(192.168.*.* or 10.0.0.*) and the box is using NAT and perhaps doing
some firewalling. But you tell us: what's the output of ifconfig and
route?

> I'm guessing this box-like thingee is a 'cable modem'. All it provides
> is access outside. No firewall, no nothing, right?
>

No, it's more likely a cablemodem-router combination. The modem
converts the electrical signal on the cable to Ethernet. The router
side of the box routes the Ethernet from the modem to each of the four
ports. Depending on the smarts of the device, it may be able to
allocate one IP address to each port or do even fancier stuff. It may
also include a firewall, NAT, DHCP, DNS, logging, content blocking,
VPN support and lots of other stuff.

> So what do I do now? 

What is it you want to do? Do you have specific plans for what you
want to do with the different IP addresses?

> I could hook up a single box that's running a firewall as well. Block
> everything but 80, for example.
>
> I could hook up four boxes, too. But I'm not sure I'm comfortable having
> to mess with four firewalls on four boxes; that begins to become a lot
> of admin that I should be able to handle in a central point.
>

All of the IP addresses can pass over the same physical wire, so the
question is what you want to do with them. If the four IP addresses
are to go to different devices, they need to be routed, either using
the firmware in the device you have (the router) or by adding another
device inline. OTOH, if you just bought the four IP addresses so you
could have four separate SSL-supporting domains on the same web
server, you can send all of the packets there over one wire. Or... you
might want to do something else. You'll need to tell us what you plan.

> So what are y'all doing with a setup like this?

I've got one static IP on which I host a few domains and maintain some
externally accessible services (ftp, ssh, subversion). I can (and
usually do ) keep that side of the network separate from the other
line coming in, a higher-speed but dynamic IP, on which we have the
office. Separate firewalls, separate routers. The idea is that the
Internet-facing services could be exploited without affecting the
in-house resources, and it models what a lot of clients have: internal
office resources and an externally hosted web site (I'm just
self-hosting). It's overkill, but it's what I've ended up with, so
far.

-- 
Ted Roche
Ted Roche & Associates, LLC
http://www.tedroche.com


___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


RE: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Tracy Pearson
I use a simple router (i.e. LinkSys; D-Link)
I find it does not properly handle DNS and was constantly getting timeouts.
Having just 2 boxes it was easily configured manually.

Were I to have more boxes, I would use a dedicated firewall/dhcp Linux
distro I could configure as needed.

Running a business I would investigate a larger dedicated system (i.e. Sonic
Wall; Panda GateDefender) Some of these products allow for fallback
connections to the internet.
http://www.sonicwall.com/
http://www.pandasoftware.com/products/Gatedefender_Integra.htm

Tracy

> -Original Message-
> From: Whil Hentzen (Pro*)
>
> So what are y'all doing with a setup like this?
>
> Whil




___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.


RE: [NF] What are people doing with cable interfaces?

2006-11-07 Thread mrgmhale
Good Day, Whil!

Out here in the Upstate NY/Rochester/Geneva area I have seen Time
Warner/RoadRunner move to a combo Cable Modem/Router (often with WiFi) unit
for both business class and residential use.  These units can be configured
as "Pass Through" devices where you end up with a WAN IP popping out of the
LAN side, which requires you to use your own firewall, or as a Router where
the LAN side pops out with a 192.168.1.nnn IP at all the LAN ports (and WiFi
if that is turned on).  For my clients I have always opted for the Pass
Through configuration as their SonicWall firewalls are set up for incoming
VPN use.  For home users that are friends I have no problem with them using
the Router configuration and saving a few bucks by not having to go out and
buy a separate Router of their own.  If the home users need a VPN to match a
remote location I will go with Pass Through, then place a firewall with VPN
behind the RR unit.

So, how do you tell if you have the Pass Through (sometimes called
"transparent mode") or Router configuration?  From what I have seen the
Router config is the default setup.  One has to request the Pass Through
configuration, then hope the RR folks know what the hell is meant by that.
If the IP coming out the LAN ports (4 ports you mentioned coming out of the
6 playing card deck size box) are 192.168.1.nnn, then you have the Router
setup, which is okay unless you need an incoming VPN based on your own
firewall settings.  In the case where you have the Router config the RR Tech
Rep was somewhat correct in saying you only have one active IP, as he likely
means (whether he knows it or not) you have only one WAN/Public IP.  If you
paid more for a static IP, than that is the static IP assigned to your unit
on the WAN/Public side of the box.  You can get multiple WAN IPs, static or
dynamic, for real reasonable (no longer $50 each, now down to $10 each, per
month of course).

If the 4 ports are popping out something other than 192.168.nnn.nnn, then
your unit is set up as Pass Through.  If indeed you have 4 separate IPs in
the non-192.168.nnn.nnn range then you have 4 WAN/Public IPs, whether static
or not.  If you did not request multiple WAN IPs this is an unlikely
scenario.

Now, for the $1,000 question...  If you connect to one of the 4 ports with a
PC, is it auto-assigning (DHCP) an IP to your PCs?  Or do you have to set up
each PC with a static IP (which you can do with a DHCP system anyway)?  This
is more a question out of curiosity than anything else.  I have only seen
DHCP configurations on the LAN ports with the new RR Cable Modem/Router
units.  You can still use static LAN IPs for your PCs with a DHCP unit.  The
advantage I see with DHCP is if the DNS Server IPs ever change, the PCs' DNS
address is updated upon IP resetting/rebooting.

But wait, there is more!  If you are hosting web/eMail/ftp,etc. Servers, and
have been using your own firewalls to manage all that, then you need to have
the RR unit set up as a Pass Through configuration.  That way your
firewall(s) manage which ports are allowing Port Forwarding or DMZ
management with your Servers.  If you try to do that behind the RR unit in
Router configuration you will have a real good time trying to get it
configured properly.  For me, I prefer the Pass Through config, then use my
own equipment to manage the signal processing.

I hope that helps ...


Regards,

Gil



> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Whil Hentzen (Pro*)
> Sent: Tuesday, November 07, 2006 6:57 AM
> To: [EMAIL PROTECTED]
> Subject: [NF] What are people doing with cable interfaces?
>
>
> I've just acquired a line with Time-Warner BizClass. The rationale
> behind it, let's leave that for another time. 
>
> So now I've got some pretty basic questions I've been spoiled for so
> long, with a pair of T1s coming into the house right next to this TW
> line... Kind of like the frustration at having to deal with a dial-up. 
>
> Anyways, the fellow who installed it wasn't terribly helpful (BIG
> SURPRISE), nor were the folks on the other end of tech support. But
> that's OK, I can experiment.
>
> At the end of the line coming in from out-of-doors, there's a box the
> size of maybe six decks of playing cards. The line goes into it, and
> there are four Ethernet ports available. Tech support says that only one
> is active, but I don't quite believe him, as I can plug a box into any
> of them and get out. I've got four static IP addresses.
>
> I'm guessing this box-like thingee is a 'cable modem'. All it provides
> is access outside. No firewall, no nothing, right?
>
> So what do I do now? 
>
> I could hook up a single box that's running a firewall as well. Block
> everything but 80, for example.
>
> I could hook up four boxes, too. But I'm not sure I'm comfortable having
> to mess with four firewalls on four boxes; that begins to become a lot
> of admin that I should be able to handle in a central point.
>
> So I cou

RE: [NF] What are people doing with cable interfaces?

2006-11-07 Thread Jim Felton
I'm wonder how you are dealing with the two T1 lines and how many IPs you
had.  If you had 4 IPs why not do the same thing you are now?  A possible
solution would be to put 5 NICs in PC, Use 4 (100Mb) to attach to the RR and
the 5th (Gigabyte card) to attach to your Switch on your Intranet.  You can
run the firewall, active virus, ... on the PC and forward the unique IPs to
the system you want on you net.  This is basically a cheap multi port router
with all the options you want to load.  There are many free Linux router
packages out there that can even run from a floppy.

Jim

 -Original Message-
From:   [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]  On Behalf
Of Whil Hentzen (Pro*)
Sent:   Tuesday, November 07, 2006 6:57 AM
To: profox@leafe.com
Subject:[NF] What are people doing with cable interfaces?

I've just acquired a line with Time-Warner BizClass. The rationale
behind it, let's leave that for another time. 

So now I've got some pretty basic questions I've been spoiled for so
long, with a pair of T1s coming into the house right next to this TW
line... Kind of like the frustration at having to deal with a dial-up. 

Anyways, the fellow who installed it wasn't terribly helpful (BIG
SURPRISE), nor were the folks on the other end of tech support. But
that's OK, I can experiment.

At the end of the line coming in from out-of-doors, there's a box the
size of maybe six decks of playing cards. The line goes into it, and
there are four Ethernet ports available. Tech support says that only one
is active, but I don't quite believe him, as I can plug a box into any
of them and get out. I've got four static IP addresses.

I'm guessing this box-like thingee is a 'cable modem'. All it provides
is access outside. No firewall, no nothing, right?

So what do I do now? 

I could hook up a single box that's running a firewall as well. Block
everything but 80, for example.

I could hook up four boxes, too. But I'm not sure I'm comfortable having
to mess with four firewalls on four boxes; that begins to become a lot
of admin that I should be able to handle in a central point.

So I could also plug a firewall into one of the cable modem ports, then
a hub into the other side of the firewall, and plug boxen into the hub.

JUST CAN'T DECIDE!!

So what are y'all doing with a setup like this?

Whil


[excessive quoting removed by server]

___
Post Messages to: ProFox@leafe.com
Subscription Maintenance: http://leafe.com/mailman/listinfo/profox
OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.