Re: firewall on my web server

[spotter@itd.nrl.navy.mil (Shaya Potter)]

-----BEGIN PGP SIGNED MESSAGE-----

Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

      
>      My questions:
>      
>      After installation of fwtk:
>      
>      Q1: Will my remote users/clients still be able to telnet into this 
>     
>          machine - after the initial installation of this package.

It is possible to allow them to connect to the firewall machine, by letting 
them either 1)telnet to a different network card on the machine, i.e. set 
              up the machine with a side visible from inside the firewall 
              only OR
            2)when they telnet to the firewall, and the get the firewall's 
              propmt, you can let them do "c localhost", this is the way we 
              do it in the lab I work in, and if I remember correctly when      
              we we were running fwtk (now we run TIS's Gauntlet) that     
              worked, HOWEVER, that can be a big security hole, and can 
              maybe take away the whole advantage of a firewall

Hope this helps,

Shaya
- --
Shaya Potter
spotter@itd.nrl.navy.mil
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMm1I5dnmB2S2D+tlAQHRTwQAkK6K2ofTfblvzjZWX+fxQ0coflmqcV/X
z1N9KaOK3oZc6hGYWw6QYj5AaKtHc7AlYsHcIZsEK7WFu3tqJgGploKgsvtkBmif
cUJz9iqxyhVmNp1MnwFNdoX6fCL5v57aq9XeQDHMyK1QUd8Vn1UrdtY3n4xAb2as
WgipvViwm6g=
=ypwM
-----END PGP SIGNATURE-----

--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com