Network Flight Instructions, Part II: Internet gateway configuration and basic online security rules

    Date19 Feb 2001
    CategoryFirewalls
    4668
    Posted ByAnthony Pell
    This part of the article gives an overview of ways to use your DSL machine as gateway for your home or office network, and goes through the basic steps to setup and maintain security to machines connected directly to the Internet. . . . This part of the article gives an overview of ways to use your DSL machine as gateway for your home or office network, and goes through the basic steps to setup and maintain security to machines connected directly to the Internet. With NAT (or "IP masquerading", as it's called in another universe), multiple machine can be hidden behind one gateway machine. The machines behind the gateway can use their own, private network numbers (usually form the 10/24 or 192.168/16 subnets), and the gateway will translate the private, internal addresses to the public, external address of the gateway machine (hence NAT => Network Address Translation, see Image #3). Any replies made to requests sent out will be translated before sent back to the client. One of the characteristics of this scheme is that a client machine needs to establish a connection, and no outside machine can connect beyond the NAT gateway. From the security point of view this is absolutely desirable. From a practical view, it might be needed to forward single ports to inside machines, e.g. to let them handle WWW or FTP requests.
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    Do you read our distribution advisories on a regular basis?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /component/communitypolls/?task=poll.vote&format=json
    23
    radio
    [{"id":"84","title":"Yes, for a single distribution","votes":"0","type":"x","order":"1","pct":0,"resources":[]},{"id":"85","title":"Yes, for multiple distributions","votes":"6","type":"x","order":"2","pct":60,"resources":[]},{"id":"86","title":"No","votes":"4","type":"x","order":"3","pct":40,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.