PDA

View Full Version : Routers that dont have firewalls?


ozzy0627
08-29-01, 11:02 PM
Anyone know a router that does not have any firewall at all??
I know you can open ports in the router to get by the firewall. but you can only open ports for one Ip address not multiple Ip address. I have 4 comptuers and 3 of them cant get past firewall.

thanks Ron

klosters64a
08-29-01, 11:32 PM
The Cisco 675's don't. At least not as configured by me.

su root
08-30-01, 12:12 AM
The idea of a router is to use one IP address for everyone connected. You can open all the ports on it, but you can only map them to a single computer each. When they were created, they were used for businesses that run seperate servers for HTTP, FTP, MAIL, etc, and want to map the one IP address to all of them.

IE:
http://www.shareware.com
is not the same server as
ftp://ftp.shareware.com
but they have the same IP address,
the router simply pipes:
Port 80 to www.shareware.com
Port 21 to ftp.shareware.com

It's like that with all routers.

As for internet access, a router's firewall sould NOT block outgoing internet access. Make sure the DHCP is enabled on the router, and that the computers are set to use the DHCP (kuz it's used to configure the internet on them all)

rugby
08-30-01, 07:57 AM
Just so you know, your router is NOT a firewall. It's a router performing NAT, which is still good. What you need to make sure is that the router is performing DHCP or use static IP's on ALL of your computers for connectivity.

ozzy0627
08-30-01, 10:18 PM
.......I have dhcp enabled right now........I opened up all ports to one of the IP address dynamically assigned. But the other IP address you can not open up the IP address to ports because of NAT .........you need somthing called multi NAT to do this..........So my main pc with ports open can join games just fine.......my other pc cannont join certain games.........I can disable all nat......but then I have to assign static ipaddresses......this defeats the purpose of having a router then......then I would just use a switch and toss my computers on it with other ipaddresses.

A better question is what router can I buy that supports multi-nat(opening all ports to every pc) or what router does not have nat at all that does dhcp

su root
08-30-01, 11:49 PM
I'm not sure about the routers that have Multi-NAT, but NAT is one problem and advantage to Routers. Personally I have my cable modem piped into the uplink on my hub & distributed to 3 computers. It's the cheapest and easiest. Each computer gets it's own IP, no restrictions (except I run firewalls on them all).

Check with your cable company about how many IP addresses you get (I get 3, so if I buy another computer, I will have to get a router or use Internet Connection Sharing or something.

rugby
08-31-01, 10:34 AM
Originally posted by ozzy0627
.......I have dhcp enabled right now........I opened up all ports to one of the IP address dynamically assigned. But the other IP address you can not open up the IP address to ports because of NAT .........you need somthing called multi NAT to do this..........So my main pc with ports open can join games just fine.......my other pc cannont join certain games.........I can disable all nat......but then I have to assign static ipaddresses......this defeats the purpose of having a router then......then I would just use a switch and toss my computers on it with other ipaddresses.

A better question is what router can I buy that supports multi-nat(opening all ports to every pc) or what router does not have nat at all that does dhcp


nothing. Here's the problem, let's say you run an ftp server on your 1 computer. When people connect from the outside they're not typing in the ip address for the computer, they're typing in the ip address for the router and then the router looks in it's portmapping statement and sees that ftp is routed to the ip address of the ftp server. Now, if you want multi-nat the router won't have the slightest clue where to send the ftp request.

Your only solution is to buy more public ip addresses from your isp.