Hi Pat,
The i5/OS is the wrong tool for this job - the System i is probably not
the cheapest platform for this, but it will work. In general, it makes
sense that you hire someone to do this for you - this way your customer
get's a correctly done job on the first try - this stuff isn't terribly
complicated, but learning on-site at a customer isn't professional.
Depending on your finances, there are several approaches on how you can
handle this:
1.) Install a Linux partition in your System i. Use a variety of open
source tools to achieve what you want. Cost depends on your current
hardware. Starting at 5000US$.
2.) Purchase a 1000US$ 1U Server. Install a Linux-Firewall Distribution
like IPcop.
3.) Continue using your ISPs Mail-Service. Buy a Firewall Appliance
which supports Proxy Authentication (e.G. Astaro, SonicWall, ZyWall).
About 1000 US$, about 100 US$ per year for content filter subscribtion.
4.) Purchase Microsoft's Small Business Server, so you have a central
point for fileshares, mail and groupware functionality. Use ISA to
provide a software based firewall. About 7500 US$, about 3000-5000
US$/Year for maintenance and stuff.
5.) Same as 3.), but use Hosted Exchange or a similar hosted groupware
setup. About 500US$ per month.
It's not a good idea to store email locally on machines which do not get
backed up. Store your important E-Mail centrally.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Pat Barber
Sent: Tuesday, May 29, 2007 4:45 PM
To: Midrange Systems Technical Discussion
Subject: Masquerade NAT
I got a customer that wants to "let" the folks in the
office have access to the web for selected applications.
They have a small lan with about 30-35 users. They will
all be using Access for emulation.
They also want to "limit" some folks to "mail only".
All will have mail but others would have full access
to the web.
I tried reading up and found a section in InfoCenter on
Masquerade Nat or "hiding" existing ethernet addresses.
Is this method what I should be looking at for handling
this ???
It "sounds" simple but I'm not sure of what I will run into
with this method.
Can a "smart" router handle some or all of this ???
midrange.com
