[ale] Firewall Preference

[Dow_Hurst]

I'd prefer the bridge since it will provide simpler configuration with public IPS rather than dealing with forwarded ports.
Just my preference....
Dow


-----Original Message-----
From: Christopher Fowler <cfowler at outpostsentinel.com>
To: ale at ale.org
Sent: Dec 13, 2005 2:26 PM
To: ale at ale.org
Subject: [ale] Firewall Preference

I now have space at a colo with 8 public IPs.  I need to install a
firewall but have a question on the best method.

1.  Should I install a firewall that bridges 2 network cards and
    sits between my equipment and a Cisco 2900XL?  This method I
    can consolidate all my rules on the firewall and then all
    my servers can have public IPs.

2.  Should I install a firewall that has 2 network cards and on the
    2nd interface install my equipment on a 192.168.1.X subnet.  I
    then give the first interface all 8 public IPs but using IP aliasing
    and then use one to one NAT to allow customers to access my 
    equipment as if it was on a public segment.

Thanks,
Chris


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale


No sig.