[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] NAT Question



Kevin,

Thanks for the tip.  I downloaded the latest FreeS/WAN tarball this morning.

Really dumb question, and I probably don't know the answer because I haven't dug into this enough - FreeS/WAN will be able to handle all of my Windows 98 users with no problems, right?

I would be very hesitant to put a
lotus notes server in that situation.
I'm in the same position, I think I can squeeze VPN past the president, but that creates problems just by the way Notes is built (needing the client on each machine).  For example if a sales rep is out without his laptop VPN really won't help much.  Anyway, that's not what I want to ask.

Can you point me to some information (docs, etc) on WHY Notes is not secure or why you wouldn't want to put it outside the firewall.   I need something to take to the President and say "This is WHY I'm not going to put Notes in that position, but VPN is the solution that we will go with."

Thanks again.
 

--John
 
 
 

> I've got a Qube2 and I was wondering about using NAT.
>
> Here is what I would like to do:
>
> - I run Lotus Notes on a server here that is behind our firewall (the
> Qube acts as our firewall)
> - I would like to have my users be able to get to Notes from outside the
> office, without moving the box outside the firewall.

John,

You can forward any set of ports from the Qube's IP to any internal
machine(s). Keep in mind that opening any hole in the firewall which points
at your internal server is akin to putting that server outside the firewall.
Any host, from anywhere, can connect to that open port, which essentially
means connecting to your internal server. I would be very hesitant to put a
lotus notes server in that situation.

Instead, I would recommend a VPN option. That might involve installing some
software on your qube from telnet. FreeS/Wan is a good option for this
http://www.freeswan.org/

Kevin