Great Circle Associates Firewalls
(October 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Apple protocols through a firewall
From: Joshua Cole <jcole @ access . digex . net>
Date: Thu, 19 Oct 1995 09:09:40 -0400 (EDT)
To: robert @ deakin . edu . au (Robert Ruge)
Cc: firewalls @ GreatCircle . COM
In-reply-to: <199510190017 . KAA12804 @ hestia . ccs . deakin . edu . au> from "Robert Ruge" at Oct 19, 95 10:17:03 am

> 
> Has anyone got any ideas on how one would get Apple Ethertalk
> protocols through a firewall setup or provide any compeling
> reason why doing so would be an extremely bad idea?

Well, for one thing, AppleTalk protocols over Ethernet are not IP, so
IP firewalls will have no effect. If, however, you are encapsulating
AppleTalk in IP, you will have to get a firewall or tunneling software
that is smart enough to filter on specific AppleTalk services.

You cannot, of course, filter on specific AppleTalk node addresses. Rather,
you will have to filter out Networks, Zones or Name Binding Protocol names.

For services, you will have to filter based on Datagram Delivery Protocol
socket IDs. I'm not sure if there is a published list of these, but
you may want to check out some of the Mac FTP archives like info-mac.

I am not aware of any products that do any of this currently, but it's
not an easy prospect.

Good luck!

--Joshua Cole
  Communications Engineer
  EDS


References:
Indexed By Date Previous: Re: Encrypted data across national boundaries???
From: "Simon J. Gerraty" <sjg @ zen . void . oz . au>
Next: Apple protocols through a firewall -Reply
From: Wade Williams <wwilliams @ mail . state . tn . us>
Indexed By Thread Previous: Apple protocols through a firewall
From: Robert Ruge <robert @ deakin . edu . au>
Next: Re: Apple protocols through a firewall
From: Mike Ciavarella <mikec @ phyto . cyber . com . au>

Google
 
Search Internet Search www.greatcircle.com