Vigor 2600 Firewall settings

I have a draytek vigor 2660x - use it for email/web browsing/some kazaa
downloading and ftp uploading/downloading. The default firewall settings for
it pass all online probe/security tests without any problems - is there any
reason to add any other firewall rules/filters?

Ta.

"Jan Kemble" <(E-Mail Removed)> wrote in message
news:boafka$1bulpv$(E-Mail Removed)...
> I have a draytek vigor 2660x - use it for email/web browsing/some kazaa
> downloading and ftp uploading/downloading. The default firewall settings
for
> it pass all online probe/security tests without any problems - is there
any
> reason to add any other firewall rules/filters?

You are no doubt using it in NAT mode. If so
the answer is no.

"Alastair" <(E-Mail Removed)> wrote

> You are no doubt using it in NAT mode. If so
> the answer is no.

Thanks for your reply - sorry I don't know what NAT mode is ! ?

Jan

"Jan Kemble" <(E-Mail Removed)> wrote in message
news:boamgp$1ccns5$(E-Mail Removed)...
>
> "Alastair" <(E-Mail Removed)> wrote
>
> > You are no doubt using it in NAT mode. If so
> > the answer is no.
>
> Thanks for your reply - sorry I don't know what NAT mode is ! ?

It's the default mode. Where you have private IPs on
your network, all sharing the single public IP of the
router for their Internet connectivity.

Non-NAT mode is where each PC on your LAN has a public
IP and uses that for it's connectivity.

NAT mode provides the same effect as a firewall with no
further fiddling required.

Alastair" <(E-Mail Removed)> wrote in message

> It's the default mode. Where you have private IPs on
> your network, all sharing the single public IP of the
> router for their Internet connectivity.
>
> Non-NAT mode is where each PC on your LAN has a public
> IP and uses that for it's connectivity.
>
> NAT mode provides the same effect as a firewall with no
> further fiddling required.


Thanks for explaining it. I do indeed have NAT

J.

Alastair wrote:

> "Jan Kemble" <(E-Mail Removed)> wrote in message
> news:boamgp$1ccns5$(E-Mail Removed)...
>
>>"Alastair" <(E-Mail Removed)> wrote
>>
>>
>>>You are no doubt using it in NAT mode. If so
>>>the answer is no.
>>
>>Thanks for your reply - sorry I don't know what NAT mode is ! ?
>
>
> It's the default mode. Where you have private IPs on
> your network, all sharing the single public IP of the
> router for their Internet connectivity.
>
> Non-NAT mode is where each PC on your LAN has a public
> IP and uses that for it's connectivity.
>
> NAT mode provides the same effect as a firewall with no
> further fiddling required.

I would appreciate a non IT admins (idiots guide) to NonNAT mode. I
have the same router, and would be interested in setting it up in the
alternative mode, using the firewall. How does each internal LAN
machine have a seperate external IP address. Does the ISP provide more
than 1? A idiots guide would be appreciated....

Cheers.

"Zapp Brannigan" <(E-Mail Removed)> wrote in message
news:fUdqb.3424$(E-Mail Removed)...
> Alastair wrote:
>
> > "Jan Kemble" <(E-Mail Removed)> wrote in message
> > news:boamgp$1ccns5$(E-Mail Removed)...
> >
> >>"Alastair" <(E-Mail Removed)> wrote
> >>
> >>
> >>>You are no doubt using it in NAT mode. If so
> >>>the answer is no.
> >>
> >>Thanks for your reply - sorry I don't know what NAT mode is ! ?
> >
> >
> > It's the default mode. Where you have private IPs on
> > your network, all sharing the single public IP of the
> > router for their Internet connectivity.
> >
> > Non-NAT mode is where each PC on your LAN has a public
> > IP and uses that for it's connectivity.
> >
> > NAT mode provides the same effect as a firewall with no
> > further fiddling required.
>
> I would appreciate a non IT admins (idiots guide) to NonNAT mode. I
> have the same router, and would be interested in setting it up in the
> alternative mode, using the firewall. How does each internal LAN
> machine have a seperate external IP address. Does the ISP provide more
> than 1? A idiots guide would be appreciated....

First contact your ISP and ask them for a block of public IP addresses.
Then, in the router config, enable 2nd subnet, entering one of the new
IPs as the router address. Allocate remaining IPs to the PCs on your
network. Set up some firewall rules. That's it.

Alastair wrote:

> "Zapp Brannigan" <(E-Mail Removed)> wrote in message
> news:fUdqb.3424$(E-Mail Removed)...
>
>>Alastair wrote:
>>
>>
>>>"Jan Kemble" <(E-Mail Removed)> wrote in message
>>>news:boamgp$1ccns5$(E-Mail Removed)...
>>>
>>>
>>>>"Alastair" <(E-Mail Removed)> wrote
>>>>
>>>>
>>>>
>>>>>You are no doubt using it in NAT mode. If so
>>>>>the answer is no.
>>>>
>>>>Thanks for your reply - sorry I don't know what NAT mode is ! ?
>>>
>>>
>>>It's the default mode. Where you have private IPs on
>>>your network, all sharing the single public IP of the
>>>router for their Internet connectivity.
>>>
>>>Non-NAT mode is where each PC on your LAN has a public
>>>IP and uses that for it's connectivity.
>>>
>>>NAT mode provides the same effect as a firewall with no
>>>further fiddling required.
>>
>>I would appreciate a non IT admins (idiots guide) to NonNAT mode. I
>>have the same router, and would be interested in setting it up in the
>>alternative mode, using the firewall. How does each internal LAN
>>machine have a seperate external IP address. Does the ISP provide more
>>than 1? A idiots guide would be appreciated....
>
>
> First contact your ISP and ask them for a block of public IP addresses.

What's ISP's do this? Do they charge? I am with PlusNet, anyone know
if this is gonna cost me?

> Then, in the router config, enable 2nd subnet, entering one of the new
> IPs as the router address. Allocate remaining IPs to the PCs on your
> network. Set up some firewall rules. That's it.
>
>

On Thu, 06 Nov 2003 20:12:00 +0000, Zapp Brannigan
<(E-Mail Removed)> wrote:

>> First contact your ISP and ask them for a block of public IP addresses.
>
>What's ISP's do this? Do they charge?

AAISP and Mistral do this - neither charges for the service.

--
Hiram Hackenbacker

In article <bWxqb.387$(E-Mail Removed)>,
(E-Mail Removed) says...
> Alastair wrote:
>
> > "Zapp Brannigan" <(E-Mail Removed)> wrote in message
> > news:fUdqb.3424$(E-Mail Removed)...
> >
> >>Alastair wrote:
> >>
> >>
> >>>"Jan Kemble" <(E-Mail Removed)> wrote in message
> >>>news:boamgp$1ccns5$(E-Mail Removed)...
> >>>
> >>>
> >>>>"Alastair" <(E-Mail Removed)> wrote
> >>>>
> >>>>
> >>>>
> >>>>>You are no doubt using it in NAT mode. If so
> >>>>>the answer is no.
> >>>>
> >>>>Thanks for your reply - sorry I don't know what NAT mode is ! ?
> >>>
> >>>
> >>>It's the default mode. Where you have private IPs on
> >>>your network, all sharing the single public IP of the
> >>>router for their Internet connectivity.
> >>>
> >>>Non-NAT mode is where each PC on your LAN has a public
> >>>IP and uses that for it's connectivity.
> >>>
> >>>NAT mode provides the same effect as a firewall with no
> >>>further fiddling required.
> >>
> >>I would appreciate a non IT admins (idiots guide) to NonNAT mode. I
> >>have the same router, and would be interested in setting it up in the
> >>alternative mode, using the firewall. How does each internal LAN
> >>machine have a seperate external IP address. Does the ISP provide more
> >>than 1? A idiots guide would be appreciated....
> >
> >
> > First contact your ISP and ask them for a block of public IP addresses.
>
> What's ISP's do this? Do they charge? I am with PlusNet, anyone know
> if this is gonna cost me?

PlusNet can provide you with a block of (typically 4) IP addresses at no
no extra charge.

http://portal.plus.net/info2/whatisa....html#NATNoNAT