Setting up my network

Ok here it goes what I would like to achieve is to not have my pc or my
laptop go straight out to the net. Instead I would like to put a PC out in a
sort of DMZ that would go and get the downloads/information I require. The
kit I have is

2 PC's
1 Laptop
Symantec vpn 100 firewall this has built in router
Ebuyer 4port ADSL Modem/Router
54g Wireless acces point

Any help would be great


TIA

Iain

In article <40e7146c$0$6449$(E-Mail Removed)>, "Iain"
(E-Mail Removed) says...
> Ok here it goes what I would like to achieve is to not have my pc or my
> laptop go straight out to the net. Instead I would like to put a PC out in a
> sort of DMZ that would go and get the downloads/information I require. The
> kit I have is
>
> 2 PC's
> 1 Laptop
> Symantec vpn 100 firewall this has built in router
> Ebuyer 4port ADSL Modem/Router
> 54g Wireless acces point
>
Your PCs aren't connecting straight to the internet - a hardware NAT
router provides a fairly effective barrier.

I understand this but I must be able to put one pc out in a dmz then vpn to
it to collect any webpages/downloads


Iain
"Rob Morley" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) t...
> In article <40e7146c$0$6449$(E-Mail Removed)>, "Iain"
> (E-Mail Removed) says...
> > Ok here it goes what I would like to achieve is to not have my pc or my
> > laptop go straight out to the net. Instead I would like to put a PC out
in a
> > sort of DMZ that would go and get the downloads/information I require.
The
> > kit I have is
> >
> > 2 PC's
> > 1 Laptop
> > Symantec vpn 100 firewall this has built in router
> > Ebuyer 4port ADSL Modem/Router
> > 54g Wireless acces point
> >
> Your PCs aren't connecting straight to the internet - a hardware NAT
> router provides a fairly effective barrier.

In article <40e85542$0$6449$(E-Mail Removed)>, "Iain"
(E-Mail Removed) says...
> "Rob Morley" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) t...
> > In article <40e7146c$0$6449$(E-Mail Removed)>, "Iain"
> > (E-Mail Removed) says...
> > > Ok here it goes what I would like to achieve is to not have my pc or my
> > > laptop go straight out to the net. Instead I would like to put a PC out
> in a
> > > sort of DMZ that would go and get the downloads/information I require.
> The
> > > kit I have is
> > >
> > > 2 PC's
> > > 1 Laptop
> > > Symantec vpn 100 firewall this has built in router
> > > Ebuyer 4port ADSL Modem/Router
> > > 54g Wireless acces point
> > >
> > Your PCs aren't connecting straight to the internet - a hardware NAT
> > router provides a fairly effective barrier.
>
> I understand this but I must be able to put one pc out in a dmz then vpn to
> it to collect any webpages/downloads
>
How about just sticking another network card in the Internet-facing
machine and hanging your LAN off it that way?

Good suggestion

--
Need someone to show you how to install your network?
We will show you simply, no jargon!

Full video and screen capture tutorial

Visit www.ShowMeSimply.com for more information.
"Rob Morley" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) t...
> In article <40e85542$0$6449$(E-Mail Removed)>, "Iain"
> (E-Mail Removed) says...
> > "Rob Morley" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed) t...
> > > In article <40e7146c$0$6449$(E-Mail Removed)>, "Iain"
> > > (E-Mail Removed) says...
> > > > Ok here it goes what I would like to achieve is to not have my pc or
my
> > > > laptop go straight out to the net. Instead I would like to put a PC
out
> > in a
> > > > sort of DMZ that would go and get the downloads/information I
require.
> > The
> > > > kit I have is
> > > >
> > > > 2 PC's
> > > > 1 Laptop
> > > > Symantec vpn 100 firewall this has built in router
> > > > Ebuyer 4port ADSL Modem/Router
> > > > 54g Wireless acces point
> > > >
> > > Your PCs aren't connecting straight to the internet - a hardware NAT
> > > router provides a fairly effective barrier.
> >
> > I understand this but I must be able to put one pc out in a dmz then vpn
to
> > it to collect any webpages/downloads
> >
> How about just sticking another network card in the Internet-facing
> machine and hanging your LAN off it that way?

Iain wrote:

> Ok here it goes what I would like to achieve is to not have my pc or my
> laptop go straight out to the net. Instead I would like to put a PC out in a
> sort of DMZ that would go and get the downloads/information I require. The
> kit I have is
>

Don't think you understand what a dmz is for it is to allow acess from
the outside world INTO specific port numbers on a server pc -- ie: a
web server or ftp server.
Any normal fireware on a router or by will allow you to go out on to the
web and pull web pages or files back using the normal web protocols and
port numbers unless specifically block the port, protocol or in some
cases a specific application.
As example of blocking a specific application, as an anti trojan measure
on my PC I have set up rules in Kerio Firewall so Outlook Express and
Internet Explore can't reach the internet but Firefox and Thunderbird
can .

Iain wrote:
> Ok here it goes what I would like to achieve is to not have my pc or my
> laptop go straight out to the net. Instead I would like to put a PC out
> in a sort of DMZ that would go and get the downloads/information I
> require. The kit I have is
>
> 2 PC's
> 1 Laptop
> Symantec vpn 100 firewall this has built in router
> Ebuyer 4port ADSL Modem/Router
> 54g Wireless acces point
>
> Any help would be great

I'm not sure what you want to do... try telling us what you wish to do,
rather then how you wish to do it.

I see no reason to do:

Modem -> PC -> LAN

When you can do:

Modem -> LAN

If you wish to access one of your machines from outside the subnet, then
forward the respective ports/protocols from the modem to your machines IP
address.

Ben
--
A7N8X FAQ: www.ben.pope.name/a7n8x_faq.html
Questions by email will likely be ignored, please use the newsgroups.
I'm not just a number. To many, I'm known as a String...

On Sat, 3 Jul 2004 21:16:19 +0100, "Iain" <(E-Mail Removed)> wrote
in <40e7146c$0$6449$(E-Mail Removed)>:

>Ok here it goes what I would like to achieve is to not have my pc or my
>laptop go straight out to the net. Instead I would like to put a PC out in a
>sort of DMZ that would go and get the downloads/information I require. The
>kit I have is

It looks as if you want to set up a screened subnet firewall, with proxy
servers for outgoing traffic on bastion hosts on the perimeter network.
Although this is a well known firewall architecture, it is a lot of work
to set up.

I have used the conventional terminology for the various parts; look
them up with your favourite search engine, this will point to the
standard textbooks, as well as various online resources. Doing that
search and getting and reading the textbooks is a small part of the
necessary effort.

--
Owen Rees - opinions expressed here are mine; for a full disclaimer
visit <http://homepages.tesco.net/~owen.rees/index.html#disclaimer>
for e-mail use "owen.rees at tesco.net" instead of the From address