Re: ADSL router/Watchguard SOHO setup

From: jfb2908 (jfb2908@hottmail.com)
Date: 03/11/02


From: "jfb2908" <jfb2908@hottmail.com>
Date: Mon, 11 Mar 2002 13:22:01 -0000

That seems fine to me.

What I would also do is 'consider' which outbound services you actually
need... and block everything else. Things like Instant Messaging etc which
can spread viruses.

And if you have an email server, secure it against relaying. And if you
have an IIS server, run the IIS lockdown tool and apply relevant security
patches..... and if you have....

:-)

Sometimes it seems like the opposition not only move the goalposts but steal
the ball as well....

"Clueless" <itqueriesuk@yahoo.co.uk> wrote in message
news:40435a1b.0203110429.46b2d67a@posting.google.com...
> Hello,
>
> I'd appreciate some advice on my setup please. It works fine but I
> need to know whether it's as secure as it should be.
>
> Configuration is as follows:
>
> Asus AAM6000EV ADSL router
> External IP address: dynamic from ISP
> Internal IP address: is 192.168.xxx.1
>
> Watchguard SOHO WG2500
> External IP address: 192.168.xxx.2
> Internal IP address: 192.168.0.xx
>
> PCs on LAN: IP address range 192.168.0.xx
>
> Watchguard is currently configured 'out of the box' ie all outgoing/no
> incoming.
>
> The reason it's setup this way is that the router 'collects' the IP
> address from my ISP. This means I can't configure the firewall with
> the 'true' external IP address and I have to use a private one.
>
> Is this OK or am I missing something?
>
> TIA
>
> ----



Relevant Pages

  • ADSL router/Watchguard SOHO setup
    ... Configuration is as follows: ... External IP address: dynamic from ISP ... Watchguard SOHO WG2500 ... The reason it's setup this way is that the router 'collects' the IP ...
    (comp.security.firewalls)
  • Re: Two ISPs, One NATed Internal Subnet, Firewall Policys
    ... ISP is a static subnet of 8 IPs the other dynamic. ... failover(and regularly for the dynamic connection). ... the netfilter configuration can be static; ... > DNS server monitoring is often used. ...
    (Fedora)
  • Re: VPN IPSEC issue, can you please help?
    ... > and I do have a Linksys router set up with a static IP to the ISP. ... > client VPN. ... > that without unravelling a server configuration that is working> otherwise. ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange mail sending problem
    ... For direct ISP accounts, there's a button to ... to fix the configuration. ... I have two old ISP POP accounts that I ... Also, I found the POP3 connector to be unreliable, and so each client is ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN IPSEC issue, can you please help?
    ... and I do have a Linksys router set up with a static IP to the ISP. ... client VPN. ... that without unravelling a server configuration that is working otherwise. ...
    (microsoft.public.windows.server.sbs)