[wellylug] adsl modems

[Don Jones]

On Thu, 2003-07-03 at 10:24, Centurion Computer Technology Ltd wrote:
> But makes it a whole lot more difficult for tracking the ip address of
> the machine on jetstart (dynamic ip).  I want easy access via ssh and I
> don't trust the external modems firewall and nat.

I too am on an ISP helpdesk - I _strongly_ advise staying well clear of
usb and internal dsl modems, they can be very problematic. We recommend
using externals We tend to recomend the micronet brand as they are
inexpensive and have a 'dmz' function which makes the modem pass
everything to an internal host (but there are others that do the same) -
it still does nat but works well (the closest you can get to bridging
with pppoa) - ive personally installed quite a gateways behind these
modems including ipsec and pptp vpn (client to server and site to site).

general config

internet
  |
  | 
micronet
  | 192.168.8.1/24
  |
  | 192.168.8.2/24
fw
  | 192.168.1.1/24
  |
LAN

Don Jones
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.wellylug.org.nz/pipermail/wellylug/attachments/20030703/cc69a852/attachment.pgp