TweetFollow Us on Twitter

Oct 99 Online

Volume Number: 15 (1999)
Issue Number: 10
Column Tag: MacTech Online

MacTech Online

by Jeff Clites <online@mactech.com>

Last month we started looking into some resources that can help you in setting up a small network, such as a home network to connect a few computers and printers. We found out that you can often cut your expenses by using an old Macintosh in place of new dedicated hardware, in this case to let you network a non-network printer, or expose a LocalTalk printer to an Ethernet network. Not only did we save some cash by using an old Mac, but also we made it possible to print from Mac OS X Server on a Blue and White G3, despite the limited connectivity options that platform currently supports. This month we're going to see how to use a single IP address to connect multiple machines to the outside world, again using an older Mac to do the real work.

Learning to Share: Network Address Translation

It's a pretty common problem - you only have one IP address available, but now you have more than one computer. So, you have to decide which one gets to use the modem, DSL line, or cable modem, or else you end up switching off and having to do a lot of plugging and unplugging of cables. Although it seems as though it shouldn't be possible, you actually can let all of your computers access the outside world at once through this single public IP address, thanks to a protocol known as Network Address Translation (NAT). In a nutshell, you assign arbitrary "private" IP addresses to the machines on your local network, and all communication to the outside world goes through a gateway machine (which can be a computer or a dedicated hardware device), which translates the source address in the header of the outgoing packets to your single public IP address, and it makes a note of this. Then, it reverses the process on incoming reply packets, so that they arrive at the proper local machine.

NAT is a capability built into most firewall products, and there are hardware devices which can act essentially as black boxes and do NAT for you, such as SonicWALL, BeadleNet's firewall routers, and Macsense's XRouter. These devices tend to be simple to set up and use, but are overkill if you just want to share an IP address - they are designed to do much more than just NAT, and their prices reflect this. A software-based approach is more economical, and it continues my theme of taking advantage of your legacy Macs. Both Vicomsoft and Sustainable Softworks have software solutions which perform NAT. Vicomsoft has several different products which include this along with their other functionality, but I chose IPNetRouter from Sustainable Softworks: there is no limit imposed on the number of computers you can connect through a single gateway, and it is low-cost (it is priced at $89), in part because it is simpler and a little more do-it-yourself. Also, there is a 50% educational discount available. I'm going to focus on IPNetRouter here, but you may want to check out the competition (both software- and hardware-based) for yourself.

SonicWALL
<http://www.sonicwall.com/>
BeadleNet
<http://www.beadlenet.com/>
Macsense XRouter
<http://www.macsensetech.com/Product/mih120.html>
Vicomsoft
<http://www.vicomsoft.com/>
Sustainable Softworks
<http://www.sustworks.com/>

Although IPNetRouter can seem a bit cryptic at first, if you just want to do NAT there are clear instructions on the company's web site, and you'll be up and running in just a few minutes. Your gateway machine can use either one or two Ethernet cards, and there are instructions on how to set up either configuration. The two-card setup is conceptually easier to understand, and offers a bit more security: one card connects to your local network and the other connects to the outside, so no information about your internal network configuration can leak to the outside world without going through IPNetRouter. Ethernet cards are cheap, so you may want to opt for this setup.

Getting Started with IPNetRouter
<http://www.sustworks.com/products/ipnr/gettingstarted/Guide.html>

This brings up another benefit of NAT: your gateway machine acts in part as a firewall, hiding your internal network from the outside world. In fact, from the outside it will appear as though there is only a single computer involved. This, in itself, makes it difficult to break into your internal computers; your private LAN can access the public internet, but not the other way around. If you want to go a little further and add some additional security measures, Sustainable Softworks has a page entitled Building Your Own Low Cost Firewall which will help you set up IPNetRouter for this. Finally, you can do almost the opposite, and "punch a hole" in your configuration to allow, for instance, a web server to operate from inside of your network. To do this, you set up IPNetRouter to do inbound port mapping, which routes all traffic destined for a particular port at your public IP address to a particular port on a particular machine on your internal network. This allows machines on the public internet to initiate connections to your internal web server; they think they are connecting to, say, port 80 of your gateway machine, but really they are being served web pages from port 80 (or another port of your choosing) of in internal machine. You'll probably need to do similar port mapping to use the QuickTime Streaming Server (but client machines can receive streaming QuickTime 4 content without any special configuration - support for this is built-in).

Building Your Own Low Cost Firewall
<http://www.sustworks.com/products/ipnr/gettingstarted/firewall.html>
Port Mapping
<http://www.sustworks.com/products/ipnr/gettingstarted/port_mapping.html>

So, for less than $90 I can connect multiple computers to the internet, and set up firewall protection for a web server. That's not bad, and best of all, it's fast. In my home setup, I'm using a PowerMac 7500/150 as my gateway, and there's no noticeable slowdown compared to when my internal Mac is connected directly to my DSL line. Part of the reason that IPNetRouter is fast is that it is Open Transport native (in fact, most of its capabilities are built into Open Transport already, and IPNetRouter just provides a way to configure them). But you also have to remember that this isn't a computationally intensive task - I believe that Cisco routers still use 68K-based processors. So even an old 68K Mac should give pretty good performance.

The pages mentioned above do a pretty good job of introducing you to concepts such as NAT, firewalls, and port mapping. You can get some more information on NAT from the KnowledgeShare section of Vicomsoft's site, or you can go directly to the RFCs and get the details.

Vicomsoft KnowledgeShare: Network Address Translation
<http://www.vicomsoft.com/knowledge/reference/nat.html>
RFC1631 - The IP Network Address Translator (NAT)
<http://www.faqs.org/rfcs/rfc1631.html>
RFC2663 - IP Network Address Translator (NAT) Terminology and Considerations
<http://www.faqs.org/rfcs/rfc2663.html>

So, again we've found a strategy that lets us use a spare Macintosh to save us the expense of buying new hardware to set up our network, adding IP sharing to our bag of tricks to go along with the printer sharing techniques we learned last month. Also, we've again solved a problem that developers will be especially likely to face: even if you plan to use only a single computer, if you are using Mac OS X Server then you currently need a second IP address in order to access the internet from the Blue Box. With a NAT setup this is no longer a problem, and you can use last month's printing trick at the same time by running Apple's LocalTalk Bridge on your gateway along with IPNetRouter - they seem to play well together.

As a final note, when you run into snags you should check out the Three Macs and a Printer web site, which contains a wealth of information about setting up a small network, and explains everything in simple terms. It covers many topics that I have not been able to touch upon, and it has recently settled in to its very own domain.

Three Macs & a Printer
<http://www.threemacs.com/network/index.html>

When you get tired of connecting everything together, take a gander at the other links available from the MacTech Online web pages at <www.mactech.com/online/>.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Thunderbird 52.3.0 - Email client from M...
As of July 2012, Thunderbird has transitioned to a new governance model, with new features being developed by the broader free software and open source community, and security fixes and improvements... Read more
coconutBattery 3.6.3 - Displays info abo...
With coconutBattery you're always aware of your current battery health. It shows you live information about your battery such as how often it was charged and how is the current maximum capacity in... Read more
Little Snitch 4.0.2 - Alerts you about o...
Little Snitch gives you control over your private outgoing data. Track background activity As soon as your computer connects to the Internet, applications often have permission to send any... Read more
VueScan 9.5.82 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
Postbox 5.0.17 - Powerful and flexible e...
Postbox is a new email application that helps you organize your work life and get stuff done. It has all the elegance and simplicity of Apple Mail, but with more power and flexibility to manage even... Read more
CleanMyMac 3.8.6 - $39.95
CleanMyMac makes space for the things you love. Sporting a range of ingenious new features, CleanMyMac lets you safely and intelligently scan and clean your entire system, delete large, unused files... Read more
Default Folder X 5.1.6b3 - Enhances Open...
Default Folder X attaches a toolbar to the right side of the Open and Save dialogs in any OS X-native application. The toolbar gives you fast access to various folders and commands. You just click on... Read more
Amazon Chime 4.6.5852 - Amazon-based com...
Amazon Chime is a communications service that transforms online meetings with a secure, easy-to-use application that you can trust. Amazon Chime works seamlessly across your devices so that you can... Read more
VOX 2.8.30 - Music player that supports...
VOX just sounds better! The beauty is in its simplicity, yet behind the minimal exterior lies a powerful music player with a ton of features and support for all audio formats you should ever need.... Read more
iFFmpeg 6.4.3 - Convert multimedia files...
iFFmpeg is a comprehensive media tool to convert movie, audio and media files between formats. The FFmpeg command line instructions can be very hard to master/understand, so iFFmpeg does all the hard... Read more

The best games we played this week - Aug...
Another busy week has come to a close. We played a lot of excellent games this week and now it's time to look back and reflect on some our favorites. Here are our picks for the week of August 18. [Read more] | Read more »
War Wings beginner's guide - how to...
War Wings is the newest project from well-established game maker Miniclip. It's a World War II aerial dogfighting game with loads of different airplane models to unlock and battle. The game offers plenty of single player and multiplayer action. We... | Read more »
How to win every 2v2 battle in Clash Roy...
2v2 is coming back to Clash Royale in a big way. Although it's only been available for temporary periods of time, 2v2 has seen a hugely positive fan response, with players clamoring for more team-based gameplay. Soon we'll get yet another taste of... | Read more »
Roll to Win with Game of Dice’s new upda...
Joycity’s hit Game of Dice gets a big new update this week, introducing new maps, mechanics, and even costumes. The update sets players loose on an exciting new map, The Cursed Tower, that allows folks to use special Runes mid-match. If you feel... | Read more »
Bottom of the 9th (Games)
Bottom of the 9th 1.0.1 Device: iOS iPhone Category: Games Price: $4.99, Version: 1.0.1 (iTunes) Description: Play the most exciting moment of baseball in this fast-paced dice and card game! | Read more »
The best apps for viewing the solar ecli...
If you somehow missed the news, many parts of the United States will be witness to a total solar eclipse on August 21 for the first time in over 90 years. It'll be possible to see the eclipse in at least some capacity throughout the continental U... | Read more »
The 5 best mobile survival games
Games like ARK: Survival Evolved and Conan Exiles have taken the world of gaming by storm. The market is now flooded with hardcore survival games that send players off into the game's world with nothing but maybe the clothes on their back. Never... | Read more »
Portal Walk (Games)
Portal Walk 1.0 Device: iOS Universal Category: Games Price: $1.99, Version: 1.0 (iTunes) Description: Portal Walk is adventure and relaxing platform game about Eugene. Eugene stuck between worlds and trying to find way back home.... | Read more »
Technobabylon (Games)
Technobabylon 1.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0 (iTunes) Description: City of Newton, 2087. Genetic engineering is the norm, the addictive Trance has replaced almost any need for human interaction,... | Read more »
5 reasons why 2v2 is the best mode in Cl...
Supercell has been teasing fans with 2v2 windows that allow players to team up for limited periods of time. The Summer of 2v2 was just this past July, but players are already clamoring for more of that sweet, sweet team-based action. The fans have... | Read more »

Price Scanner via MacPrices.net

Back To School With The Edge Desk All-in-one...
Back to school is just around the corner, and the ergonomically correct Edge Desk all-in-one portable kneeling desk is ideal for students living in dorms and small apartments, Edge Desk features:... Read more
Norton Core Secure Wi-Fi Router Now Available...
First introduced at the 2017 Consumer Electronics Show (CES), Norton Core, a secure, high-performance Wi-Fi router, fundamentally changed the concept of Wi-Fi routers by making security the primary... Read more
ViewSonic Adds New 27-inch 4K UHD Monitor to...
ViewSonic Corp. has introduced the VP2785-4K, a 27-inch 4K UHD (3840×2160) monitor that delivers precise and consistent color representation and performance to ensure incredible image quality. Built... Read more
Apple now offering Certified Refurbished 2017...
Apple is now offering Certified Refurbished 2017 27″ iMacs for up to $350 off original MSRP. Apple’s one-year warranty is standard, and shipping is free. The following models are available: – 27″ 3.... Read more
13-inch 2.3GHz MacBook Pros on sale for $100...
Amazon has the new 2017 13″ 2.3GHz MacBook Pros on sale today for $100 off MSRP, each including free shipping: – 13″ 2.3GHz/128GB Space Gray MacBook Pro (MPXQ2LL/A): $1199.99 $100 off MSRP – 13″ 2.... Read more
Clearance 2016 13-inch MacBook Airs available...
B&H Photo has clearance 2016 13″ MacBook Airs available for up to $200 off original MSRP. Shipping is free, and B&H charges NY & NJ sales tax only: – 13″ 1.6GHz/128GB MacBook Air (MMGF2LL... Read more
Clearance 21-inch and 27-inch iMacs available...
B&H Photo has clearance 21″ and 27″ Apple iMacs available for up to $500 off original MSRP, each including free shipping plus NY & NJ sales tax only: – 27″ 3.3GHz iMac 5K: $1799 $500 off... Read more
New iOS 11 Productivity Features Welcome But...
The iOS community is in late summer holding mode awaiting the September arrival of the iPhone 8 and iOS 11. iOS 11 public betas have been available for months — number six was released this week —... Read more
Samsung Electronics Launches New Portable SSD...
Samsung Electronics America, Inc. has announced the launch of Samsung Portable SSD T5 – its newest portable solid state drive (PSSD) that raises the bar for the performance of external memory... Read more
TrendForce Reports YoY Gain of 3.6% for 2Q17...
Market research firm TrendForce reports that the global notebook shipments for this second quarter registered a sequential quarterly increase of 5.7% and a year-on-year increase of 3.6%, totaling 39.... Read more

Jobs Board

Development Operations and Site Reliability E...
Development Operations and Site Reliability Engineer, Apple Payment Gateway Job Number: 57572631 Santa Clara Valley, California, United States Posted: Jul. 27, 2017 Read more
Frameworks Engineering Manager, *Apple* Wat...
Frameworks Engineering Manager, Apple Watch Job Number: 41632321 Santa Clara Valley, California, United States Posted: Jun. 15, 2017 Weekly Hours: 40.00 Job Summary Read more
Business Development Manager - *Apple* Medi...
Job Summary Apple Music is a single, intuitive app that...- all in one place. You can stream any Apple Music song, playlist or album, and download it Read more
Development Operations and Site Reliability E...
Development Operations and Site Reliability Engineer, Apple Payment Gateway Job Number: 57572631 Santa Clara Valley, California, United States Posted: Jul. 27, 2017 Read more
Frameworks Engineering Manager, *Apple* Wat...
Frameworks Engineering Manager, Apple Watch Job Number: 41632321 Santa Clara Valley, California, United States Posted: Jun. 15, 2017 Weekly Hours: 40.00 Job Summary Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.