Re: [jim@cyberjunkees.com: Re: FW: Worm probes]

From: "Joe Abley" Sure there is. Buy an aggregation router that has some features, and/or knuckle down and write some code instead of complaining about project plans, implementation schedules and documentation standards :)

We already supply most of the functionality being discussed in this thread - via tunneling. That is, we tunnel all default gateway LAN traffic through the DSL connection to a virtual firewall at the ISP. That firewall does all the "translation" stuff e.g. NAT for some LAN systems, Real world IPs for others and NAPT for the rest. And yes we can give each LAN system different access rights/ports, port forward from real world IP addresses to LAN systems, log usage by port/LAN IP address, route subnets to the LAN and all that stuff. But that doesn't solve Juha's issue, we can't prevent someone dumping 10gig of garbage traffic on the Jetstream connection as it is Layer 3 addressable within IPNet. Only Telecom can solve that issue. Cheers BG. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog