an interesting problem, IP and IPX reqd

[Colin Campbell <sgcccdc @ citec . qld . gov . au>]

Hi,

Consider the following setup:



		       "internet"
			   |
			   |
			router
			   |
			   |
		---------------------------
		    |		    |
		    |		     \
		bastion		      ------router-----
		    |				       \
		    |					|
		-------------			    dialup network
			|
			|
		     router
		     	|
			|
		   "the inside"

Requirements:

	dialup users to have internet access
	dialup users to have telnet access to "inside"
	dialup users use IP or IPX (both over PPP)
	insiders to have internet access
	no access from the internet to inside
	no access from the internet to dialup network

Conditions:

	dialup users have RFC 1597 addresses 
	inside is several Class B and C nets
	dialup users can access only a subset of internal machines
	not every dialup user can access every available internal machine

Any bright ideas out there? (esp wrt IPX)

Colin