Handbook of Local Area Networks, 1998 Edition:Advanced LAN Interconnectivity Issues and Solutions Click Here! Search the site:   ITLibrary ITKnowledge EXPERT SEARCH Programming Languages Databases Security Web Services Network Services Middleware Components Operating Systems User Interfaces Groupware & Collaboration Content Management Productivity Applications Hardware Fun & Games EarthWeb sites Crossnodes Datamation Developer.com DICE EarthWeb.com EarthWeb Direct ERP Hub Gamelan GoCertify.com HTMLGoodies Intranet Journal IT Knowledge IT Library JavaGoodies JARS JavaScripts.com open source IT RoadCoders Y2K Info Previous Table of Contents Next CLIENT CONFIGURATION Client32 is necessary for IPX/IP Gateway clients. The client upgrade is installed to your server in the client files during the IPX/IP Gateway installation, or you may install the client directly from the CD-ROM. For Windows 95, the client installation opens a dialog with a series of check boxes. Included with the Novell IP Gateway (that’s the new name for the IPX to IP services) are Novell Distributed Print Services, NetWare/IP, SNMP Agent, on down through Novell Dialup Services for Windows 95. A new dialog appears the first time a station restarts with Client32 and the IPX/IP Gateway software included. Users may enable or disable the gateway for their workstation. Enabling the gateway renames the default WINSOCK.DLL program that ships with Windows 95, so only the Novell WINSOCK.DLL program is used. Must users set their IP address, subnet mask, and default router? Nope, because the IPX/IP Gateway handles all that for the users. BorderManager users can set all the relevant details inside the Windows 95 or NT Control Panel > Networking > Add sequence of mouse clicks. Although BorderManager’s Proxy Server allows much more control, the IPX/IP Gateway does offer a way to control access to all network resources for all IPX/IP Gateway clients. You can no longer afford to let every user wander around the Internet, downloading goodness knows what in the background while viewing whatever they wish in the foreground. Traditional TCP/IP host access control is pretty coarse. Every gateway vendor listed, including Novell, has a way to deny access to specific Internet resources. There are two options available inmost cases: 1.  Block all connections not specifically allowed. 2.  Allow all connections not specifically blocked. These controls are set inside NWAdmin, in the Outgoing Rules page. Settings allow you to choose NDS clients with mouse clicks, and set restrictions for entire networks or individual hosts via IP addresses, and individual Web pages via their URL. You may also block users from running FTP (File Transfer Protocol), but many Websites bypass the need for FTP by using Web protocols for file download. Yes, you can block users from the Web protocol, as well. Not everyone in the company needs full reign to roam the Internet. Summary is simple: enable the IPX/IP Gateway, update the client software where necessary (including the Netscape browser Novell provides) and all your NetWare clients gain access to the Internet. Full support for email client software is included, and the gateway provides NetWare client connection to all TCP/IP hosts, internal, external, or on the Internet. THIRD-PARTY PRODUCTS Novell was late coming to the IPX/IP Gateway party, and vacuums get filled quickly in the computer business. Over a dozen other companies released IPX/IP Gateway products before Novell got around to it. Let’s take a look at a few of the most popular;well-executed stand-alone gateways and those using the NetWare server as their host. You may ask why we need to discuss any product beyond the Novell IPX/IP Gateway. If you’re running IntranetWare, you have the gateway included. If you’re still running NetWare 3.x, or have 3.x servers you would like to dedicated to the gateway host task, Novell doesn’t have a good answer for you. Novell’s product relies on NDS for authentication and security, so you must host the gate on NetWare 4.x. Some clients are concerned about using their NetWare server as the gateway, since it is exposed to the Internet. Is there a possibility of a security breach? Not really, but if it makes your boss uncomfortable, don’t push the issue. A gateway host separate from your server is not difficult to configure, and a nervous boss is a thing to avoid whenever possible. NOV*IX (FIREFOX - FTP SOFTWARE) In the leadoff position, the NOV*IX product line developed by Firefox and now owned by FTP Software. FTP is integrating the gateway technology with their outstanding client software, to add even more value to the NOV*IX product line. Starting in England to develop OSI gateways for NetWare server, Firefox moved to the TCP/IP gateway market before many people knew there was a market. They provide their own protocol stack for the Novell server, which allows them to control IP address distribution. NOV*IX was the first gateway to provide IP addresses to specific clients via the pool method or direct assignment. For years, Novell and Firefox kept a close working relationship. Many, including your humble narrator, expected Novell to buy Firefox one day. FTP beat them to it, but the close fit between their products still works to your advantage. •  http://www.ftp.com Previous Table of Contents Next Use of this site is subject certain Terms & Conditions. Copyright (c) 1996-1999 EarthWeb, Inc.. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of EarthWeb is prohibited. Please read our privacy policy for details.