Great Circle Associates Firewalls
(November 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall question.
From: Carl Jolley <cjolley @ iac . net>
Date: Sun, 26 Nov 1995 16:48:16 -0500 (EST)
To: Peer Schmitz <bart!mactounix . datafox . ch!peer @ uunet . uu . net>
Cc: firewall dudes <firewalls @ GreatCircle . COM>
In-reply-to: <9511241812 . AA01512 @ bart . datafox . ch>

Sounds like a DNS timeout. How do you handle internal host DNS? Are
your reverse mappings set up correctly?

**** cjolley @
 iac .
 net <Carl Jolley>
**** All opinions are my own and not necessarily those of my employer ****

On 24 Nov 1995, Peer Schmitz wrote:

> Internet Mail        Firewall question.
> Hello firewall dudes.
> Ive just installed & tested fwtk on my Ultrix BSD machine.
> I decided to try the tn-gw first.
> I set up, on port 23, the tn-gw.
> 
> It works. However, when I open my terminal emulator on my mac to connect to it,
> it takes about 60 seconds before I get the tn-gw-> prompt.
> 
> My syslog says this:
> Nov 24 17:51:19 localhost: 1487 tn-gw: permit host = unknown/194.51.36.70 use
> of gateway
> 
> after I get the prompt...hey no problems. All is nice & fast.
> Any faintest ideas what that can be? Why does it take ages to establish the
> tn-gw connection? This unix host runs NOTHING else (but me :) )
> 
> Im running fwtk on my only unix machine in my net, and I do not run a dns.
> Its like the ultra simple setup. (Internet coming soon...hence im working on
> this.)
> Q2: Can I configure the netacl/my cisco in such a way that all cisco packets
> from the internet get routed to the fwtk/netacl when someone connects and
> requests a service, the connection is ONLY LOGGED, and then the connection is
> sent on its way from my host on my net connecting to the service desired, EVEN
> WHEN THE DESTINATION SERVICE DESIRED IS SAY FTPD ON A MACINTOSH? Ie. no
> authentication. Just logging. But everything, not only logging connections to
> UNIX services on the host which hosts the fwtk, but also other tcp services
> provided by Macs on the net?
> 
> Thanks much for any tips,
> Peer Schmitz
> The paranoid Sysadmin
> DataFox SA
> 
> 
> 


References:
Indexed By Date Previous: Re: CISCO 2511 with NTS RAS
From: Alan Olsen <alano @ teleport . com>
Next: Re: Internet Firewall Vulnerabilities - Part 4 of 4
From: Carl Jolley <cjolley @ iac . net>
Indexed By Thread Previous: Firewall question.
From: Peer Schmitz <bart!mactounix.datafox.ch!peer>
Next: System Security Expertise Procurement
From: jterado @ passport . ca

Google
 
Search Internet Search www.greatcircle.com