[AG-TECH] AG and firewalls

[Kelly, Vaughn [NCSUS Non J&J]]

The Cisco PIX supports stub multicast routing as of 6.2(1).  The latest
stable release however, is 6.2(2).  It will provide the ability to restrict
access to certain groups/addresses as well.

-----Original Message-----
From: bernholdtde at ornl.gov [mailto:bernholdtde at ornl.gov] 
Sent: Friday, March 21, 2003 6:55 PM
To: ag-tech at mcs.anl.gov
Cc: bernholdtde at ornl.gov
Subject: [AG-TECH] AG and firewalls

What firewall hardware/software are people using when they put AG
nodes behind firewalls?  My local mcast expert says she knows of no
hardware firewall that properly supports mcast, so both she and I are
curious about other people's setups.

At the moment, we're trying to put up firewalls around ours using
ZoneAlarm on the display machine and iptables on audio and video.  The
ZoneAlarm stuff seems to be working fine, but we're only part way
through the iptables stuff.  If anyone's done this and has examples
they can share, I'd be most appreciative.

Thanks
--
David E. Bernholdt                   |   Email: bernholdtde at ornl.gov 
Oak Ridge National Laboratory        |   Phone: +1 (865) 574 3147    
http://www.csm.ornl.gov/~bernhold/   |   Fax:   +1 (865) 574 0680    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mcs.anl.gov/pipermail/ag-tech/attachments/20030324/c56fbb15/attachment.htm>