Re: NAT and NAT

> > Quick question. Let's say I have the following setup:

After reading a quaint article about various network topology designs, I decided to go with exactly what the orginal poster is thinking of doing. I have 1 ip address, but all too many computers. Some computers are workstations, some are servers. If the server needs to be accessable from the outside world, either directly or indirectly, it goes behind the first NAT. If the computer is a workstation, which all too often is vulnerable to the latest & greatest security flaws, it goes behind the second NAT.

The second NAT does not allow for any type of incoming connections. The first NAT does port forwarding for servers. All together this generates a style of network called a "DMZ" De-Militarized Zone, at least according to the particular article that I read. So far it has worked beautifully.

Yes, I could have put 3 NICs in the first NAT and run a server leg and a workstation leg to achieve some of the same effects. Since this generated some weird routing and DNS issues I decided to use a second pizzabox 486 and make my life simpler.

  --Aaron Received on Tue Dec 17 11:32:09 2002