RE: NAT Based on Service with only one legal IP

["Sloane, David" <DSloane () vfa com>]

W,

Firewalls targeted at small-office/home-office users are more likely to have
this feature than "enterprise" firewalls.

Smoothwall is a good example - www.smoothwall.org - if you're interested in
a linux-distro-as-firewall solution.  I haven't used it much, but it seems
good and you can buy support if you need it.  You should have similar
capabilities with current Linux distributions, but securing them could take
more time/expertise than you have.

On the small-appliance side, most of the Netgear SOHO firewalls can do
port-address translation from a dynamic, routable IP address to your
non-routable addresses.  Netgear's firewalls all do Port Address Translation
- see http://www.netgear.com/products/routers/firewallvpn.asp - but they
won't give you the depth or breadth of features that you're used to with
Checkpoint.  


Some Cisco firewall products have this feature, though they appear to be
less flexible than other implementations.  For example, some Cisco PIX
firewalls (PIX 6.x software?) can do what you're describing (see "Using PIX
Firewall in SOHO Networks"
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/pixc
lnt.htm).


Good luck.

-David


-----Original Message-----
From: W. Builder [mailto:xbuilder () yahoo com] 
Sent: Tuesday, May 20, 2003 11:43 AM
To: firewall-wizards () honor icsalabs com
Subject: [fw-wiz] NAT Based on Service with only one legal IP


Dear Gurus
 
Service based NAT with only one legal IP can be done
with Checkpoint FW-1 NG but not for dynamically
allocated legal IP

http://www.phoneboy.com/fom-serve/cache/86.html

Are there any other non-CheckPoint firewall s/ware
products or appliances that can do this with both 
one legal static IP ? With  one dynamically assigned
legal IP?
 
Many thanks
W.Builder
 
 

__________________________________________________
It's Samaritans' Week. Help Samaritans help others. 
Call 08709 000032 to give or donate online now at
http://www.samaritans.org/support/donations.shtm
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards