<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: [AG-TECH] AG and firewalls</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>The Cisco PIX supports stub multicast routing as of 6.2(1). The latest stable release however, is 6.2(2). It will provide the ability to restrict access to certain groups/addresses as well.</FONT></P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: bernholdtde@ornl.gov [<A HREF="mailto:bernholdtde@ornl.gov">mailto:bernholdtde@ornl.gov</A>] </FONT>
<BR><FONT SIZE=2>Sent: Friday, March 21, 2003 6:55 PM</FONT>
<BR><FONT SIZE=2>To: ag-tech@mcs.anl.gov</FONT>
<BR><FONT SIZE=2>Cc: bernholdtde@ornl.gov</FONT>
<BR><FONT SIZE=2>Subject: [AG-TECH] AG and firewalls</FONT>
</P>
<P><FONT SIZE=2>What firewall hardware/software are people using when they put AG</FONT>
<BR><FONT SIZE=2>nodes behind firewalls? My local mcast expert says she knows of no</FONT>
<BR><FONT SIZE=2>hardware firewall that properly supports mcast, so both she and I are</FONT>
<BR><FONT SIZE=2>curious about other people's setups.</FONT>
</P>
<P><FONT SIZE=2>At the moment, we're trying to put up firewalls around ours using</FONT>
<BR><FONT SIZE=2>ZoneAlarm on the display machine and iptables on audio and video. The</FONT>
<BR><FONT SIZE=2>ZoneAlarm stuff seems to be working fine, but we're only part way</FONT>
<BR><FONT SIZE=2>through the iptables stuff. If anyone's done this and has examples</FONT>
<BR><FONT SIZE=2>they can share, I'd be most appreciative.</FONT>
</P>
<P><FONT SIZE=2>Thanks</FONT>
<BR><FONT SIZE=2>--</FONT>
<BR><FONT SIZE=2>David E. Bernholdt | Email: bernholdtde@ornl.gov </FONT>
<BR><FONT SIZE=2>Oak Ridge National Laboratory | Phone: +1 (865) 574 3147 </FONT>
<BR><FONT SIZE=2><A HREF="http://www.csm.ornl.gov/~bernhold/" TARGET="_blank">http://www.csm.ornl.gov/~bernhold/</A> | Fax: +1 (865) 574 0680 </FONT>
</P>
</BODY>
</HTML>