New Zealand ADSL Mailing List

From: Nick Rout <nick_at_taxlawyer.co.nz>
Date: Tue, 3 Oct 2000 13:24:56 +1300
Message-ID: <00e401c02cd0$5c7d2920$0201a8c0@taxlawyer.co.nz>

hmmm no snmp is not on!

i see no mention of it in the manual, nor of the maximum number of pinholes.

It may be back to the trick of pinholing EVERYTHING to an internal firewall
and handling the pinholes thru linux/bsd/whatever
----- Original Message -----
From: "Adam Bowden" <adam@datafreight.co.nz>
To: <adsl@unixathome.org>
Sent: Tuesday, October 03, 2000 1:12 PM
Subject: Re: Nokia MW1122

> Pinholes seem limited too -- no more than seven, which is an even bigger
> bummer. I need SMTP, HTTP, HTTPS, DNS, SSH, NTP and LDAP.

I'd have to look at a service list but it should possible to do multiple
sevices in blocks as long as you are careful not to expose a security hole.

Another option might be to configure your services to run in a block of
ports outside the normal range and then map that on the outside (external
port) to the correct port. ie Internal SMTP 8025 Internal HTTP 8080,
Internal DNS 8053 on NAPT create a block 8025 to 8080 maping to external 25
to 80. That way you can avoid exposing other services. Of course you would
need sufficiently configurable services and it could cause problems
internally with some software.

I have not tried these myself, just a suggestion. I also think this may have
been sugested on the forum before check the archives.

Adam

----- Original Message -----
From: "Juha Saarinen" <juha@saarinen.org>
To: "Adam Bowden" <adam@datafreight.co.nz>
Cc: <adsl@unixathome.org>
Sent: Tuesday, October 03, 2000 12:56 PM
Subject: Re: Nokia MW1122

> No SNMP, which is a pity... no more pretty MRTG graphs etc. :-(
>
> Pinholes seem limited too -- no more than seven, which is an even bigger
> bummer. I need SMTP, HTTP, HTTPS, DNS, SSH, NTP and LDAP.
>
> The MW11 is much faster though, if the modem stats are to be believed. Got
> 7.5Mbps/900Kbps now, up from 6-6.5Mbps/600Kbps with the M10.
>
> Admin interface is much improved, and it's nice not having to restart the
> MW11 when you change the NAPT entries. If you do restart, however, the
> MW1122 takes a lot longer to come up than the M10.
>
> --
> Regards,
>
>
> Juha
>
> PGP fingerprint:
> B7E1 CC52 5FCA 9756 B502 10C8 4CD8 B066 12F3 9544
>
> On Tue, 3 Oct 2000, Adam Bowden wrote:
>
> > Not Sure if its just me but these are my first impressions of the MW1122
> > IMHO
> >
> > It does not seem to support SNMP - I cant find a setting. Does not
respond
> > to the compaq SNMP tool (did work with M10) (not that I know anything
about
> > SNMP)
> >
> > The command prompt mode has dropped the "script" command for creating
config
> > scripts. It also appears to less configuration settings.
> >
> > Can't find settings to change the ports of the internal servers
telnet/HTTP.
> >
> > Increased our incoming rate by approximately 20% and out going rate by
> > approx 50%. Based on what the router reports
> >
> >
> > Adam
> > Data Freight Ltd
> >
> > WEBSITE: http://www.datafreight.co.nz
>
>

This message is part of the NZ Broadband mailing list.
see http://unixathome.org/adsl/ for archives, FAQ,
and various documents.
To unsubscribe: send mail to majordomo@unixathome.org
with "unsubscribe adsl" in the body of the message