At 03:51 PM 1/26/96 GMT, you wrote:
>paul .
carrol @
medaphis .
com offered up:
>
>>I am about to setup a firewall for our Internet link.
>>
>>I have recently learned that we are bringing in an X.25 line from Compuserve.
>>The line runs into a Compuserve box that resides here that we do NOT control.
>>
>>From the Compuserve box, a line runs into one of our router interfaces.
>>
>>Obviously, I want to firewall this link as well...
>>It passes IPX and TCP/IP, and needs to do both.
>>
>>The problem I have is with IPX. We have decided on Raptor Eagle as our
firewall.
>>It will run on a SUN Sparc 20, and it will NOT pass IPX.
>>
>>Any suggestions?
>
>Well .. not sure whether this works or not, but I'd be interested in comments
>myself. Is IPX critical for you ?
>
>I ask because we're running IP and IPX on our LAN here, and I'm being pushed
>to allow both across our firewalling mechanism. Our Netware guy said to me the
>other day that we needed IPX as some products actually require IPX in order
>to work. This sounds like snake oil to me - I'd have thought that the
underlying
>protocol - whether IP or IPX should make no difference whatsoever. Any
comments
>on this ?
Some applications that are netware aware assume IPX as the transport. Really
the problem is more likely the need for SPX, which you only get with IPX.
However unless you plan on running a multi-player session of Descent (which
uses an SPX socket) over your Compuserve link you shouldn't need IPX/SPX.
Ask your netware guy which apps need ipx and why?
>It's also been suggested to me that Novell/IP works by simply
>encapsulating IPX within an IP packet - this doesn't quite sound like full IP
>to me. Can anyone comment upon this ? If we can move everything to IP, then
>our problems potentially disappear here, and I needn't route IPX at all. Sound
>easy to me from there (ish!).
>
That's is how netware does IP at the server, so I guess that must be what
happens at the workstation as well. If anyone out there knows better please
correct me.
>I wonder Paul, whether you could do something along these lines ? I wonder
>everyone whether you all think I'm pouring snake oil around the place too ? :)
>
Like whiskey, a little snake oil won't kill you, just don't try and live on
it. At least not for too long.
It seems like Bill G. wants to own the world.....
I just wonder why he wants it?????
David Loysen
dwl @
hnc .
com
|
|
