NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] Stealth firewall - Is possibile under win2k?



Stefano,

If you truely mean between the router and the Internet(ISP),
than you can't do that without somebody knowing. Firewalls
would need to make use of IP addresses.

With that said, you could, however look into Sun's Sunscreen.
I think they allow for a transparent fw.

If your looking to slip a real firewall behind the router, then it
depends. How smart are the people you want to fool?
If they have any network gray matter, you can't. If your
looking to place the firewall in front of 'normal' users and
your the only network administrator, not a problem.

I'll assume(ack) that the internal clients are using the
IP address of the router (B1) as their next hop in the
default route and you not using ip unnumbered on
the router(C1 = your ISP/public network)

Let's use the following. You've got to love ASCII art - OK,
so you don't.

Internal<-->[B1]router[C1]<-->Internet

You could place the fw into your network with the address of
the routers internal IP address (B1). Then give the internal
interface of the router a new network IP address and add
an IP from the same network the external IP address of the
fw.

Now it would look like this and you wouldn't need to touch
the internal systems.

Internal<-->[B1]fw[D1]<-->[D2]router[C1]<-->Internet

HTH.

Robert
(p.s. A1 is a reserved network, not to be used in this example ;-)

- -
Robert P. MacDonald
Global Infrastructure Group, Haworth, Inc.
Voice:email: [email protected]

>>> "[OmNiY2K]" <[email protected]> 02/15/01 03:02AM >>>
>
>Hi to all,
>
>how can i configure firewall-1 to being a stealth firewall on win2k? I need to
>put a firewall between router and my internet network in a transparent way....so
>I can't assign IP addr to two NIC of firewall....
>
>Bye, Stefano




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.