Re: [OT] what firewall for allowing only one port open on a connection?

[Neil Fuller <neil.fuller@xxxxxxxxx>]

Hi Paul

It's slightly more complicated than that.

There is a firewall/switch for the Landlords system. However, there's an
unmanaged switch connected to one of the firewall ports. Connected to
the unmanaged switch (netgear I think) are several devices that we do
not want the tenant to have access to.
So, the idea was to put a small firewall device on the connection
between the tenants PC and the unmanaged switch. We could the punch the
appropriate hole in the firewall and forward that port only to the BMS
PC thus preventing the tenant from accessing anything other than the BMS
PC on the appropriate port.

I appreciate that the system is not ideal but it's not of my making
(more the making of several separate individuals/companies so it is a
bit messy!)

Does that make sense? - Hope so.

Cheers

Neil

Paul Smith wrote:

>Hi Neil,
>
>	Isn't there some system already in the building that protects the
users from each other. You will need to open a hole in that system first
anyway so wouldn't that do for you anyway.
>
>
>Regards,
>
>Paul
>
>
>-----Original Message-----
>From: ukha_d@xxxxxxx [mailto:ukha_d@xxxxxxx] On Behalf Of Neil
Fuller
>Sent: 20 March 2006 20:19
>To: ukha_d@xxxxxxx
>Subject: [ukha_d] [OT] what firewall for allowing only one port open on
a connection?
>
>The scenario
>
>In a multi tenanted building, I need one of the tenants PCs to have
>access to the BMS supervisor.
>
>The BMS supervisor is sitting on the Landlords network so the Landlord
>is a bit worried that the tenant will start snooping around the rest of
>his network..
>
>The application on the tenants PC uses just one port to access the
>Landlords BMS PC (Port 10051) So, I need a firewall to sit between the
>tenants PC and the Landlords network that only allows that single port
>to pass through the firewall.
>
>I've purchased and configured a few Broadband routers etc but I have no
>experience of this sort of application.
>
>I've seen a few firewalls in the Misco catalogue but they seem to major
>on VPN's etc and seem to indicate that the WAN side can only connect to
>a broadband router.
>
>So, that's the scenario (hope it makes sense). The question is, which
>firewall should we get. It needs to be cheap(ish) and not PC based.
I've
>seen a netgear FVL328 - would that work?
>
>Spec here => http://www.netgear.com/products/details/FVL328.php
>
>TIA
>
>Neil
>
>
>
>
>Yahoo! Groups Links
>
>
>
>
>
>
>
>
>