Re: Hardware needed for home network
On Sun, 2011-02-13 at 15:02 +0200, Andrei Popescu wrote:
> On Du, 13 feb 11, 11:35:12, Tixy wrote:
>
> > I couldn't see any practical reason for a second Ethernet interface
> > anyway. There's performance issues when input and output traffic share a
> > single interfaces, but as my ADSL speed is <2% of that of the servers
> > Gigabit Ethernet adaptor, that doesn't really factor in.
>
> Correct me if I'm wrong, but this means you have two IPs on the same
> interface, one is public and one is RFC 1918 and all your internal
> computers are connected directly to the big bad internet (via the switch
> and the modem).
It's not like that, my server's Ethernet interface only has one,
private, IP address.
The server uses PPPoE to talk to the modem, which translates this into
PPPoA to get to my IPSs equipment. So once my server has 'dialled' my
ISP the ppp interface on my server ends up with my public address, which
iptable rules can NAT, filter and forward to the private IP range.
Unless I've fundamentally misunderstood networking, I can't see how
connecting the modem to a separate NIC on the server adds any security.
(I don't discount me getting something horribly wrong, this setup is
only a few weeks old and my first foray into firewalls and routing.)
--
Tixy () The ASCII Ribbon Campaign (www.asciiribbon.org)
/\ Against HTML e-mail and proprietary attachments
Reply to: