> -----Original Message-----
> From: Robert P. J. Day [mailto:[EMAIL PROTECTED]
> On 3 Jul 2003, Michael Gargiullo wrote:
> 
> > On Thu, 2003-07-03 at 11:38, Robert P. J. Day wrote:
> > > On 3 Jul 2003, Daniel Dui wrote:
> i'm not sure if we're just not communicating here, but let me clarify
> what's going on.
> 
> > Most cable systems won't allow that to work.  I work for a cable
> > company, and we only allow 1 MAC address to be associated 
> with the cable
> > modem.
> 
> and?  ... all that's connected to the cable modem is a single linksys
> hub.  that's a single MAC address.  what's the problem?

Huh?  A hub has >ZERO< MAC addresses.  It's a simple line that 
all of the devices which DO have a MAC address (i.e., a NIC,
a WAN port on a router, etc.) connect to.  It's literally just and
electrical wire, with some minimal smarts.  Even a SWITCH does not
have a MAC, >UNLESS< it's a managed switch.

Now, a ROUTER would have a MAC address, especially if it's doing
NAT and MASQuerading...  And I bet that's what you're really
talking about.

> > Our system won't let that work at all.  I know comcast is the
> > same way, and I believe optonline work the same as well.  I 
> know your in the UK,
> 
> wherever did you get that idea?

Yeah, where did he get that idea?  I though you were in Chicago,
Rob, myself, although I see that's wrong, too, and you're actually
over the lakes from Chi-town, in Ontario.

> > so I have no idea how they run it there.  you can try it, but
> > you'll lose the ability to run a hardware firewall.
> 
> the linksys hub has some configurable *rudimentary* filtering,
> but i run iptables on my personal machine.

Ok, now you're saying that a HUB is doing filtering... that's BOGUS.
You've got a ROUTER doing filtering... TOTALLY different beast, although
some All-in-one boxes have a built in Hub or Switch on a Router...
some WAPs (Wireless Access Points) also have a built in RJ45 Switch
nowadays, hiding behind a NAT Router; my WAP (A Dlink DL-614+) has
a 4 port switch and the wireless gateway, hiding behind a NAT and
MASQ router with a WAN port.  You sure you're not talking about a 
router here?
 
> > Now you could connect the cable modem to a managed switch. 
> I know a few HP switches can do what you want to do, but they're like
$2000+
> 
> ok, pay attention.  
> 
> DSL outlet -> DSL modem -> linksys 4-port hub with wireless.

AH HAH!  You >ARE< talking about a router; you're talking about a 
Broadband Wireless Router, >NOT A HUB<.  It simply has a hub (or
more likely a switch) built into the Green side of the router.  It
provides NAT, which means you're running an internal network with
private IPs, while the router's Red interface has an public IP.
You also probably have to configure it to allow certain traffic
through, and it's probably advertised as a Firewall, as well,
with rudimentary filtering capabilities on a stateless firewall.

Yeah, my WAP at home can do that, too; I don't bother, except the
NAT, since I use IPCop as my router, and pull that to a 100Mbit
Switch (actually, two, in different parts of the house, using an
uplink between them).  My WAP hangs off one of the switches, but
in the meantime, my IPCop does my Firewalling, DNS serving, acts
as an HTTP proxy, NAT, etc.  Of course I'm biased for the IPCop,
but I prefer it to the WAP's firewall (though I may eventually
flatten my network slightly by hanging everything off the WAP,
with the firewall connected directly to the WAP's WAN port.
That would mean someone would have to hack two firewalls to
get to one of my machines, unless they came in over the wireless...)

I don't fully trust the WAP's firewalling features (very limited
control).

> from linksys hub:
> 
>   - one wired PC running XP
>   - one wireless access laptop running RH 9
> 
> cost of linksys hub: $89 US.
> 
> and yes, it works, it really does, given that both machines
> are on the net constantly, as you can verify from my incessant
> posts to RH-related mailing lists.  :-)
> 
> rday


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to