Great Circle Associates Firewalls
(July 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: News-proxy for TIS fwtk?
From: Steve . Waltner @ symbios . com (Steve Waltner)
Organization: Symbios Logic
Date: Mon, 22 Jul 1996 16:13:07 -0600
To: firewalls @ greatcircle . com
References: <9607111303 . AA02759 @ pamela . sic . se> <31E4EC06 . 1BA4 @ apogee-com . fr>

In article <31E4EC06 .
 1BA4 @
 apogee-com .
 fr>, zwobada @
 apogee-com .
 fr
(Jean-Francois Zwobada) wrote:

> Hi Stefan,
> You're absolutely right, this is way you can do if you want
> different news servers available for different internal clients.
> 
> With the Gauntlet, if you omit the "-plug-to" option, every address
> declared in the 'source field' is able to connect to everywhere. It is 
> not true with the toolkit, unfortunately.
> With the toolkit, you should consider listening on a different port
> for every external server you want to contact. But it seems that
> news clients don't want to connect to something different from 119...
> 
> plug-gw: port nntp1 mynet.* -plug-to 1external.news.server -port nntp
> plug-gw: port nntp2 mynet.* -plug-to 2external.news.server -port nntp
> ...
> 
> Regards, 
> 
> Jean-Francois

   Sorry about reviving a ?dead? thread... just got back from vacation. On
our news server, I use the plug-gw to bring all incoming feeds into our
internal news server. To feed the external news servers, I connect to
different ports (1191, 1192, 1193, ...) I then modified several programs
in INN (innxmit, nntpsend, news.daily, etc...) to add a -P option to
specify the remote port. This way, I can maintain any number of
bidirectional news feeds through the firewall. As you point out though, I
can not tell who a connection is coming from. The only indication to this
is the /var/log/news/news file and the headers of the actual articles.

-- 
Steve Waltner             | Steve .
 Waltner @
 symbios .
 com
Symbios Logic             | Phone: (316) 636-8498
3718 N. Rock Road         | FAX:   (316) 636-8889
Wichita, KS 67226         |


References:
Indexed By Date Previous: Re: Firewalls-Digest V5 #427
From: Best Little Computer Store <best @ bmi . net>
Next: Windows NT Security
From: Chris Pugrud <ChrisP @ steldyn . com>
Indexed By Thread Previous: Re: News-proxy for TIS fwtk?
From: Jean-Francois Zwobada <zwobada @ apogee-com . fr>
Next: Looking for "hot shot" - security consultant
From: rich <raf @ ezunx . com>

Google
 
Search Internet Search www.greatcircle.com