Re: Moving From NAT to Multiple IPs - Server Considerations

Hello,

I've recently started to work from home so the limitations of one IP
address are really starting to gripe me.

I've asked my ISP to order me a block of 8 ips. What considerations so I
be looking at when managing the IP server address change.

I'm not too concerned about the services going offline as they are not
used for anything critical and in any case services such as SMTP and
incoming e-mail have fail safes provided by my dns provider.

Do I need to install IPFirewall or will the server just close all the
ports that it is not using and be fine and dandy that way. Any
recommendations on good articles for installing IPFW. I've googled but I
am looking for something which allows me to do the basics but also talks
about the more advanced stuff such as blocking logins on SSH after x
attempts.

How do I manage the change from NAT to multi Ips. Does the server still
get given an internal IP address on the lan and then the router redirects
the external IP to that machine or does the machine have to be told that
it is now listening on IPs x, y and z.

Any help appreciated.

Cheers
Richard


--
Richard Collyer
richard@xxxxxxxxxxxxxx

Hi Richard,

You have asked a number of questions in one here. There are a number of
ways to do what I think you are trying to do. The way I have my systems
setup is problably the simplest but it depends on what you want.

My setup is the modem (no NAT or Firewall) on the 1st IP of the block (my
ISP calls it this the gateway address) this connects to a switch. I have a
firewall/nat/router (smoothwall) connected to the switch which does the
NATing etc to my internal network. The servers (Web, mail etc) have 2
ethernet connections, the 1st is on the external switch with an external
IP and all the ports closed except those necessary for the function. The
2nd (if you like the control connection) on the internal network with
things like the ssh oport open.

There are plenty of Howtos on IPF etc - just use Google. Also have a look
at the smoothwall site, IPcop is also good.

Hope this has given you some ideas. However, please remember anything
connected to an external ip does need a firwall.

Rob

_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Cant Send messages in Outlook
    ... Looking at the error message you're getting, your ISPs server is closing the ... What version of Outlook do you have? ... same ISP Outlook will try to make multiple connections to their server. ... Some ISPs seem to limit the number of connections they'll accept from one ...
    (microsoft.public.outlook)
  • Re: Intermittent intra-LAN connectivity
    ... Also, on the managed switch ... FW and server and have the sniffer capture the results. ... Plugged into different interface on the firewall. ... > connections for all interfaces and was rebooted. ...
    (microsoft.public.win2000.networking)
  • Re: Sending email: DNS vs. Relay and spam-blocking whitelists.
    ... On the Exchange Servers I've so-far set up, I've had to revert to relaying email via the ISP SMTP server as so much email gets bounced by the receiver's anti-spam if we send direct. ... Very nearly all of the 2500-3000 bogus email connections a day I receive come from what appear to be domestic accounts, most of whose users are presumably completely unaware that their computers are churning out spam and criminal attempts to defraud. ... Those users do actually send their own email by smarthost, so it's difficult to see why the ISP permits port 25 outbound to anywhere but its own servers. ...
    (microsoft.public.windows.server.sbs)
  • Re: Sharing ISPs
    ... Ok, first, I'm not worried about in-bound connections. ... Anyway, I thought SBS meant "Small Business Server," the single ... RAS, Exchange, Web, etc., platforms and all the fancy hardware that ... set the default route merit values to favor the faster ISP. ...
    (microsoft.public.windows.server.networking)
  • Re: Sharing ISPs
    ... Ok, first, I'm not worried about in-bound connections. ... Business Server Facility" where we have separate RAS, Exchange, Web, etc., ... default route merit values to favor the faster ISP. ...
    (microsoft.public.windows.server.networking)