Re: [cobalt-security] Might be off topic. Are computers with 168.192.x.x safe from Internet?

["jwk at Zone Alpha" <jwk@xxxxxxxxxxxxx>]

----- Original Message -----
From: Bill Irwin <bill_irwin@xxxxxxxx>
>
> You should setup a firewall for your network, then "DMZ" your web, ftp,
> and email services on the firewall. Provide Internet services by using
> NAT at a single source on your network. This is also known as Internet
> Sharing, or IP Masquerading where you use single IP that is connected to
> your Internet Service Provider. This single point then shares the
> internet connection by NAT (Network Address Translation). This will
> allow internet access to your public servers and your LAN will also be
> able to access these servers, while they can also access the internet.

Thanks Bill for answering.  It seems that I will have to work with firewall.

I was hoping that my private-IP-only machines would be simply untouchable
from beyond the router.  But maybe I should first get the firewalls set up
before I connect the router to the internal LAN switch box.

James Kim