RE: Nat, IP Filter, Etc.

BTw,

I'm also working on an article for IP Filtering based again on conversations
with its developer in Endicot.

With IP Filtering and NAT (the Built-in V4R3 and above software -- free
included with OS/400) I question using external firewalls.  The only thing
that the 400 does not have built in is a socks server and mail forwarding.
There are other techniques to get arround mail forwarding (like your ISP
should provide this service no charge) and the socks server is only a factor
if you have certain apps that absolutely need it.

Bob C.

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Art Tostaine, Jr.
Sent: Thursday, July 01, 1999 1:58 PM
To: MIDRANGE-L@midrange. Com
Subject: Nat, IP Filter, Etc.


I have a 170 running V4R4.  It has a PPP dialup connection to the internet
with a static IP.

I would like any computer on my local network to have access to the
internet.  This would just be
for mail and light web browsing for one or two userse so I'm not concerned
with the limited bandwith
to the ISP right now.

Do I need to use NAT?  I've tried to configure it using OpsNav but I am
lost.  Hidden addresses,
Mapped Address, etc.

I'm pretty sure that I don't want static Nat, I want masquerading Nat.  I
want every address in my
local lan (192.168.2.xxx) to have total access to the world.  My PPP line
points to static IP
209.xxx.xxx.xxx.  I also would like to permit TELNET, FTP and WWW traffic
in.  To make things easier
to start, I'd let all traffic in.

How can I set this up?  I've tried searching red books, they describe what I
want to do, but they
tell me to press help while configuring, and I'm lost there.

Thanks.

Art Tostaine, Jr.
CCA, Inc.
Jackson, NJ 08527

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---