Alex,<br>With all due respect, your posts to this list that I have seen seem to show you have a very large ego, and that if anyone disagrees with you they are wrong and stupid.<br><br><div><span class="gmail_quote">On 6/10/07,
<b class="gmail_sendername"><a href="mailto:alex@pilosoft.com">alex@pilosoft.com</a></b> <<a href="mailto:alex@pilosoft.com">alex@pilosoft.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Sat, 9 Jun 2007, Matt wrote:<br><br>> Christopher,<br>> I understand exactly what you are saying.... but let's think about this for<br>> a moment.<br>><br>> If the networks we are stitching together have all public IPs, then either
<br>> one of two things is happening.<br>><br>> 1 - You can't access the IPs from the Internet, so they aren't really<br>> public....they are from the public pool, and are depleting the limited<br>> supply for IPs, but they aren't public, therefore they should be private
<br>> IPs.<br>><br>> 2 - You can access the IPs from the Internet, therefore, there is no need<br>> for a VPN.<br>><br>> You should never never never NEVER use public IPs behind a firewall (unless<br>> they can be accessed from the Internet). To put a public IP behind a
<br>> firewall where it can't be accessed is a waste of IP space, and asking for<br>> routing problems.<br>You are on &@*#($&*#$ crack, that's why you can't get your VZ<br>interconnect to work.<br>
<br>a) You can, and occasionally should, use public space on a network that's<br>not connected to public Internet. You *can* request IP space from ARIN or<br>other RIRs for specifically those purposes. Reasons can be: 1) you may
<br>need to connect to internet later without renumbering 2) so you can<br>connect two private networks tomorrow without risk of conflict. Read<br>RFC1918, 'disadvantages' part.<br><br>b) Just because you are running IPSEC, it doesn't mean you have to have
<br>private IP space on either side. It doesn't mean you have to run it in<br>"tunnel" mode. The purpose of IPSEC is to encrypt live traffic, without<br>need for additional IP addresses or tunnels or whatever.
<br><br>Hire someone who knows what they are doing.<br><br>-alex<br><br>_______________________________________________<br>--Bandwidth and Colocation provided by <a href="http://Easynews.com">Easynews.com</a> --<br><br>asterisk-biz mailing list
<br>To UNSUBSCRIBE or update options visit:<br> <a href="http://lists.digium.com/mailman/listinfo/asterisk-biz">http://lists.digium.com/mailman/listinfo/asterisk-biz</a><br></blockquote></div><br>