+ Post New Thread
Results 1 to 7 of 7
Wireless Networks Thread, Firewall Config advice needed in Technical; Basically the issue is this. We are currently in the process of moving ISP and that means a new range ...
  1. #1

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45

    Firewall Config advice needed

    Basically the issue is this. We are currently in the process of moving ISP and that means a new range of IP addresses. My concerns over the temporary delay in incomming E-mail as DNS changes kick in. (well not me personally but "certain" people at work get shirty if E-mail isn't received instantly )

    So my I have a slightly hardware specifc question. I have a Netgear FVX538 firewall which usefullly has Dual WAN ports. The downside is that now is not the ideal time to get all experimental with my firewall so I need some advice on how to confgure it.

    If I set it up in load-ballancing mode and configure each port for my old and new ISP does the second port remain active for incomming connections? i.e. can I set up firewall rules for port1 with my new mail servers IP address and Port 2 with my mail servers old IP address and stilll receive e-mail on both IP's while I wait for the DNS changes to perculate over the internet?

    As I read the instruction manual it say that the load balancing is actually only applied to the outgoing connections but doensn't really mention incomming.

    I currently have it set up to only use a single WAN port. I am assuming that the second port is "deactivated". Is this the case? Can I just plug in a connection to the second port and it still be active and thus accept incomming traffic?

    Any suggestions would be appreciated.

  2. #2

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,939
    Thank Post
    1,343
    Thanked 1,787 Times in 1,110 Posts
    Blog Entries
    19
    Rep Power
    595
    Stuart, what are you using for email filtering? If you use an external service (such as webroot / EMF) then you might be able to get them to extend the time they store prior to forwarding messages on. There are a few other things this sort of service can do but rather than go on if you don't have it can you give any other details about who holds your DNS, etc to see if there is something else which can be done to smooth the transition.

  3. #3


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,475
    Thank Post
    866
    Thanked 850 Times in 672 Posts
    Rep Power
    196
    Short answer would seem to be "yes you can" - certainly would be true with a Smoothie firewall, cant see why not with yours.

  4. #4

    Join Date
    Jun 2006
    Location
    Dorset
    Posts
    111
    Thank Post
    2
    Thanked 5 Times in 4 Posts
    Rep Power
    17
    May also be worth temporarily changing the TTL settings in the DNS down to the minimum well in advance of the switch-over. That way the changes should propagate a lot more quickly when the time comes?

  5. #5

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,939
    Thank Post
    1,343
    Thanked 1,787 Times in 1,110 Posts
    Blog Entries
    19
    Rep Power
    595
    Presuming you have had a look at ftp://downloads.netgear.com/files/FV..._27Jan2010.pdf (section B-7)
    For this you need to set up outbound in load-balancing mode and you need to set up the static routes for incoming traffic. Presuming that you already have static routes in place on your existing WAN connection these should just be duplicated on WAN2. Unless you have bound particular protocols to a particular WAN port then the response to inbound traffic should go out the same port. Just remember to backup the config (granny, eggs, sucking, blah, blah, blah)

  6. #6

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    May also be worth temporarily changing the TTL settings in the DNS
    Seconded. When I've had sufficient control of DNS I've always done that e.g. 24 hours => 20 min TTLs a couple of days prior to significant IP address changes and it's always been worthwhile. Hasn't always done what it was supposed to everywhere because of some "interesting" configs out there on the net, but it certainly tends to help.

  7. #7

    Join Date
    Nov 2007
    Location
    Rotherham
    Posts
    1,678
    Thank Post
    122
    Thanked 126 Times in 102 Posts
    Rep Power
    45
    Quote Originally Posted by GrumbleDook View Post
    Presuming you have had a look at ftp://downloads.netgear.com/files/FV..._27Jan2010.pdf (section B-7)
    For this you need to set up outbound in load-balancing mode and you need to set up the static routes for incoming traffic. Presuming that you already have static routes in place on your existing WAN connection these should just be duplicated on WAN2. Unless you have bound particular protocols to a particular WAN port then the response to inbound traffic should go out the same port. Just remember to backup the config (granny, eggs, sucking, blah, blah, blah)
    Yes that was what I was reading last night. It's B-9 where it talks about the incoming traffic. Essentially I am looking to make both "public". I think it will be OK, it's just having not done it before I'm not feeling confident. Will probably just have to "suck it and see".

    To be honest I'm not actually looking to load ballance the connection as I want to be using our new faster internet. I just need two active outside ports for incomming connections.

SHARE:
+ Post New Thread

Similar Threads

  1. Esxi - Vswitch config help needed
    By pooley in forum Thin Client and Virtual Machines
    Replies: 15
    Last Post: 7th November 2011, 09:34 AM
  2. Seeking advice on Gateway-Firewall-Filter solutions
    By dleigh in forum Internet Related/Filtering/Firewall
    Replies: 0
    Last Post: 9th June 2010, 02:42 PM
  3. HP TC 5135 Config Help Needed
    By ICTNUT in forum Thin Client and Virtual Machines
    Replies: 3
    Last Post: 28th March 2008, 09:09 PM
  4. advice needed on weather a new server is needed
    By projector1 in forum Hardware
    Replies: 3
    Last Post: 24th February 2006, 09:20 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •