Re: Wireless Access Point and proxy server setup problem

["Tom Jedrzejewicz" <tomjedrz@xxxxxxxxxxxxxx>]

On Jan 20, 2008 12:35 PM, Peter Dow (ML) <maillist@xxxxxxxxxxxxxxx> wrote:

> My initial idea was #2, but would've required stringing another cable
> from the router to the 1GB switch, which I was trying to avoid.

I am confused .. the router connects only to the "outside" NIC on the
proxy server, and the switch connects to the "inside" NIC of the proxy
server.

> If I can figure out how to do #1, that sounds like the best solution.
> Looks like I can "Block Services" for all IP addresses except one; I'll
> give that a try.  I'd still like to understand why the AP doesn't work,
> but at this point I want to get it working.

I am pretty sure that it doesn't work because neither the Netgear nor
the switch will properly route the traffic between the various
subnets.

> Regarding your soapbox comments, I'll look into it.  From my limited
> understanding, firewalls protect against incoming attacks; and in this
> situation the intent is to be able to log who visits what websites, and
> to block certain websites, which is what the proxy server is doing.

Firewalls are for controlling traffic, in both directions, not just
for preventing intrusions.

> Although recently the Netgear router has been logging DOS attacks in the
> form of ACK scans from Akamai Technologies, ... <<snip>>

Once the proxy server is working and is the only outbound device
allowed, you will be able to definitively deal with this.

Good luck.