[ previous ] [ next ] [ threads ]
 
 From:  SDamron <sdamron at gmail dot com>
 To:  walterpc at mchsi dot com
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] 2nd management login
 Date:  Wed, 14 Jun 2006 15:03:13 -0500
Okay...This may sound silly...but, why on earth would you ever need a
box behind a firewall to have a real routable IP address?  Just use
1:1 NAT, and be MUCH SAFER!!

On 6/14/06, Walter PC <walterpc at mchsi dot com> wrote:
> OK - I feel stupid for not seeing that...
>
> question 2 - much more technical.
> is there or will there ever be uPnP support - like in smoothwall and the
> previously mentioned $$$$ systems (ie.  192.168.xx IP will still work
> behind  m0n0 if it has a default GW even if the LAN of m0n0 is
> 10.71.x.x - can m0n0 inject its MAC address to unanswered GW ARP requests?)
>
> question 3
> Will the the m0n0wall route traffic to public IPs behind the server...
> for example  let say I have an public subnet of 10.0.0.2 - 10.0.0.24
> (lets assume this is a public routable subnet)and I want to have the
> ability of users behind m0n0 (10.0.0.2) that may perhaps need a public
> IP, if I give them a public IP of 10.0.0.4 with the default GW of
> 10.0.0.1 (ISP device) and the public subnet mask, will m0n0 auto route
> traffic to them??  Is this possible, If so, how do I make these
> routables work??
>
> Thanks - you guys are always great help -
> Ken.
>
>
> David Kitchens wrote:
> > Stay free! LOL M0n0wall will do what you want, under the top category is
> > User Manager, made for exactly what you want. You can create users and
> > assign them whatever page you want them to control.
> >
> > Dave
> >
> >
> >> -----Original Message-----
> >> From: Walter PC [mailto:walterpc at mchsi dot com]
> >> Sent: Wednesday, June 14, 2006 1:21 AM
> >> To: m0n0wall at lists dot m0n0 dot ch
> >> Subject: [m0n0wall] 2nd management login
> >>
> >> Is there any way to add a 2nd login to the interface that has
> >> less management options??
> >> I would like to setup m0n0 so that is remotely accessible for
> >> management but with a login that support can diagnose and
> >> assist users on the network, add mac filters, and possibly
> >> reboot, but not have access to WAN IP settings, PPTP, IPSEC,
> >> Firewall and other non-essential options (at least
> >> non-essential for their support purposes).
> >> Mainly looking to create a Hot-spot GW out of this.
> >> turning off internal GUI access and setting bandwith
> >> limitations and captive portal and such...but not all the
> >> support reps are going to need access to all of the extra
> >> features, just the techs and installers.
> >> And of course we would have to have a default config file to
> >> upload so that the installers don't have to setup all of the
> >> firewall and settings.
> >>
> >> Let me know if this is feasible or if there is another router
> >> / GW that would work better  - as apposed to purchasing a
> >> enterprise based GW such as IP3 or Nomadix Ken.
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> >> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> >>
> >>
> >>
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> >
> >
> >
>
>


-- 
-------------------------------
When all you have is a hammer, everything starts to look like a nail.
Registered Linux User #409723