Re: Zyxel ZyWall 10 router MADNESS

From: MC (daven(delete_this)_at_miraclecatDELETETHISTOO.com)
Date: 09/11/04 

Date: Sat, 11 Sep 2004 20:21:42 GMT

Yeah, use host headers all the time, but I'm upset that the ZyXel does not
work as per instructions nor as advertised. They claim that it can work in
multi-NAT, but after posting to different forums, it seems that no one has
yet actually gotten Multi-NAT to work!
Suggestions to use "SUA-Only" or turn NAT off are not helping because it
misses the point entirely.

I've asked for a BIN configuration file from others, but, oddly, the
"experts" have not stepped up to the plate to supply a config file of a unit
that works in "Full Feature" mode. I assume that it is because the 10ii
does not work in Multi-NAT, period!
Any takers?

"void" <void@nowhere.org> wrote in message
news:MPG.1bad1e75d0231aab9896a3@news-server.columbus.rr.com...
> In article <78I0d.174619$mD.52778@attbi_s02>, "MC" <daven(delete_this)
> @miraclecatDELETETHISTOO.com> says...
> > I cannot use SUA because there are 4 websites with 4 separate IPs on the
> > same NIC interface on the same computer all needing port 80. I could
just
> > set the router to not use NAT at all, but the extra layer of security
NAT
> > provides is very desirable especially with automated worms, also I may
wish
> > to set up an additional rule sharing a single outside IP with many
inside
> > boxes.
>
> Not that I can fix your firewall issue, but you can run hundreds of
> websites off of one IP if you properly configure host headers.
>
> As an example, we had a customer that bought 4 IP so that he could run
> for sites, each site was a child of the main. www.site.com,
> www.ftp.site.com, www.something.site.com, www.test.site.com.
>
> By using host-headers we were able to set it for 1 IP and everything
> worked fine. The only time you really need more than one IP is for
> certificates/SSL.
>
> so, you could map a single IP:80 to the single server and still access
> each one of them by properly configuring the host headers.
>
> --
> --
> spamfree999@rrohio.com
> (Remove 999 to reply to me)