[NTLUG:Discuss] Router Needed? -- multiple NAT devices not good (_avoid_ if possible)

[Ralph Green, Jr]

Howdy,
  I am a satisfied IPCOP user.  I have never set up an orange zone in
IPCOP, but I did set one up for a friend using Smoothwall(from which
IPCOP forked).  There must be some subtlety to your answer that I am
missing, because the whole purpose of the orange zone is to isolate
those machines that do need to receive connections from the red zone. 
The orange zone usually contains web server or mail servers that the
outside world must be able to reach.  Now, the red zone cannot initiate
contact to your green zone.  Am I missing something, or did you mean to
say green?
Good day,
Ralph

On Wed, 2004-07-07 at 13:49, Bryan J. Smith wrote:

> - "Just the easiest answer"
> 
> Install IPCop 1.3 ( http://www.ipcop.org ) and make it your firewall.
> Turn the 3rd zone, ORANGE (DMZ) into the zone for your conference room.
> By default, nothing can get into ORANGE (DMZ) from RED (Internet), and
> the ORANGE (DMZ) cannot access GREEN (LAN).