On Sun, 24 Sep 2000, Phillip Deackes wrote: snip .
What make is the ISDN router? Do you administer it or have any control over it? I'm thinking that you could:
It is an Ascend, I believe. I am not at school so cannot check at the moment. We have full control over our network - the router sits next to the server and we can do with it what we wish. We connect to the Internet using IFL (an RM company). The router is a standard 2x64K ISDN 2e affair.
I presume you don't have a range of "legal" Internet IP addresses for use on your network and some kind of Network Address Translation occurs either at your ISDN router or at your ISP before your traffic reaches the Internet?
Actually we do, if I read you correctly. We have range of IP addresses we can use. Each machine on the network has its own IP address and can be pinged from outside. We run our own mail server too, using NT Mail (although mail is collected globally from the ISP using POP3) so we have quite a nice little system.
I have read the other messages on this topic but I thought I would add my thoughts - they might help. I have set up the scenario you are discussing in several schools in Carmarthenshire. If you setup matches what RM use everywhere here, then you will be using a range of private IP addresses (usually 192.168.0.0/22) with NAT in the router. If yours is like this then the simpest setup is to use a single ethernet in the proxy connected straight on to the LAN - as Matt Johnson suggested. Some of our schools do use a two ethernet setup as they have a second LAN for the admin staff and so they can use the proxy for both - they leave routing disabled to keep the networks independent. Which distro are you intending to use? The all do the same job but vary in the tools used to set them up and the packages included. We used SuSE 6.3 for most of ours and squid comes as a package ready to install - all it needs is the access control lists editing. You haven't said whether you want your proxy to be used for access control or is it just to speed up the Internet? Our schools don't connect to IFL (that is what we are here to provide) but I believe that they do implement some form of content filtering. If you do need the access control function then you can use the facilities of RM Connect to disble access to the proxy settings in IE to stop anyone bypassing the proxy. If you need proxy settings for IFL then you will need to point squid at their filter as a parent cache. Hope this is useful ____________________________________ Giles Nunn - Network Manager Carms Schools ICT Development Centre Tel: +44 01239 710662 Fax: 710985 ____________________________________