> Date: Fri, 7 Apr 95 15:52 EET
> From: jbarnes @
za (Jay Barnes)
> RFC 1597 (global addresses) seems a potential cure, except that we most
> definitely DO want to connect to the Internet. We can put our Web pages on
> a friendly Service Provider, who will also (I think) carry any DNS service
> we need, but our users want, in particular, email, FTP, Archie, etc. We
> have routers available (Cray - what d'ya mean you never heard of 'em), and a
> Sun with Firewall-1 (still to be evaluated, but purchaseable if suitable).
> Basic question. If we use RFC 1597 addresses, how do we connect to the Net?
> Do proxies, application gateways, whatever, do address translation, so that
> only our official address gets published? If so, how easy is it to relate
> that internal address to external address, on a per session basis, so that
> we can audit the use )and abuse!) of the service? (A man's gotta make a
> livin', no?)
As far as I know, you can do what you want with the TIS software and
you cannot do it with FireWall-1. For other packages, I have no
direct experience and cannot comment, but I am pretty sure that
someone will fill the gap...
As an aside, it is funny to see how organizations that actually manage
to get a class B find it small...
Julio Sanchez, GMV SA, Isaac Newton 11, PTM Tres Cantos, E-28760 Madrid, Spain
Ph. +34 1 807 21 85 | jsanchez @
es | Traveller, there is no
Fax +34 1 807 21 99 | jsanchez%gmv .
net | path; paths are made by
Telex 48487 GMEV E | Julio_Sanchez_GMV @
ie | walking (A. Machado)