Mike Murphy writes:
>
> I don't think the complexity of a dual proxy firewall is required. Here
> is a diagram of our network (give or take).
>
> The Dirty Net is a registered class C. The inside nets, which happen to
> be registered, are not visible to the external world in any way except
> the NIC registration. There are no routes from the Internet or the
> Dirty Net to the Inside Nets.
>
> Do you need anything more complicated than this?
Yes, I think you do.
OK so there aren't any routes or direct IP path in a single proxy
solution but *routing* is still a problem. Your firewall's
default route *must* be external and it then follows that your
internal network must be unique if you want to talk to them.
Ian.
------------------------------------------------------------------------------
Ian Marr Wingrove, 10 St Georges Road, Sevenoaks, KENT, TN13 3ND, UK
im @
finsbury .
co .
uk +44-732-453-577
|
|
