IP Routing Question
mike neuliep
mike at illiana.net
Wed Jan 3 19:52:10 CST 2001
OK Mr Monster, here is how I see it now that I know exactly what you're asking:
You can mix and match internal and external IPs in your own network without
breaking anything so long as target machines use external IPs and all routers
on your network are properly configured. However doing this isn't considered
a best practice. Furthermore, by doing this, you could be in violation of
RFC2050 (this is a must read!!) because you could potentially be using external
IP addresses internally that never get hit by outside clients. This is
considered a big no-no and as time goes on, ARIN will become more aggressive
with companies that don't comply with RFC2050. For example, last year Ford
Motor Company lost two class B networks. They were using these class Bs
internally and had them firewalled from the rest of the world. Two years ago
the city of Philidelphia was rejected for a third class B because they weren't
in compliance with 2050. IBM lost two of their class Bs last year for the same
reason.
The standard accepted practice is to use all internal addresses for everything.
To hit a target inside your company (which if it isn't proxied, it is a security
risk) you'll probably want your firewall to statically translate it.
Mr Monster, also I appreciate you making me think. No one here at work is
capable of making me do that :-)
Mike Neuliep
More information about the Kclug
mailing list