FireBrick examples

ADSL/Stealth with external machines

						ADSL non-NAT installation Router has single subnet PCs using real internet addresses FireBrick not to use up an address Some machines outside of firewall

In this configuration the FireBrick operates in a full stealth mode, not using one of the addresses allocated by the ISP. Some of the PCs are on the LAN side and some are on the WAN side. This is usually done where the external machines are carefully configured to be secure, but if the external machines are compromised then this does not allow access to the internal machines.

The FireBrick provides no protection for the PCs on the outside.

The FireBrick will operate out of the box with no extra configuration if required
PCs on the LAN must have the router address as their gateway address
Access the FireBrick config from a PC on the LAN using http://my.firebrick.co.uk/
Adjust filters as required

For clock setting, and any external communication from the FireBrick such as emailed logs :-

Pick one of the PC addresses for a PC that is normally on and on the LAN side
Set this as the WAN stealth address in the setup menu
Set the router address as the gateway in the setup menu

This example equally applies to :-

Any installation with a router and a single subnet
BT net start lines
Existing network installations with a router

In such cases, a second FireBrick is normally recommended. In this case, you may wish to change the LAN stealth address of the outer FireBrick to a different address, such as 217.169.0.2, so that it can be accessed from PCs on the inside without picking up the internal FireBrick by mistake.

							ADSL non-NAT installation Router has single subnet PCs using real internet addresses FireBrick not to use up an address Some machines outside of firewall Second FireBrick provides outside protection