TweetFollow Us on Twitter

Oct 99 Online

Volume Number: 15 (1999)
Issue Number: 10
Column Tag: MacTech Online

MacTech Online

by Jeff Clites <online@mactech.com>

Last month we started looking into some resources that can help you in setting up a small network, such as a home network to connect a few computers and printers. We found out that you can often cut your expenses by using an old Macintosh in place of new dedicated hardware, in this case to let you network a non-network printer, or expose a LocalTalk printer to an Ethernet network. Not only did we save some cash by using an old Mac, but also we made it possible to print from Mac OS X Server on a Blue and White G3, despite the limited connectivity options that platform currently supports. This month we're going to see how to use a single IP address to connect multiple machines to the outside world, again using an older Mac to do the real work.

Learning to Share: Network Address Translation

It's a pretty common problem - you only have one IP address available, but now you have more than one computer. So, you have to decide which one gets to use the modem, DSL line, or cable modem, or else you end up switching off and having to do a lot of plugging and unplugging of cables. Although it seems as though it shouldn't be possible, you actually can let all of your computers access the outside world at once through this single public IP address, thanks to a protocol known as Network Address Translation (NAT). In a nutshell, you assign arbitrary "private" IP addresses to the machines on your local network, and all communication to the outside world goes through a gateway machine (which can be a computer or a dedicated hardware device), which translates the source address in the header of the outgoing packets to your single public IP address, and it makes a note of this. Then, it reverses the process on incoming reply packets, so that they arrive at the proper local machine.

NAT is a capability built into most firewall products, and there are hardware devices which can act essentially as black boxes and do NAT for you, such as SonicWALL, BeadleNet's firewall routers, and Macsense's XRouter. These devices tend to be simple to set up and use, but are overkill if you just want to share an IP address - they are designed to do much more than just NAT, and their prices reflect this. A software-based approach is more economical, and it continues my theme of taking advantage of your legacy Macs. Both Vicomsoft and Sustainable Softworks have software solutions which perform NAT. Vicomsoft has several different products which include this along with their other functionality, but I chose IPNetRouter from Sustainable Softworks: there is no limit imposed on the number of computers you can connect through a single gateway, and it is low-cost (it is priced at $89), in part because it is simpler and a little more do-it-yourself. Also, there is a 50% educational discount available. I'm going to focus on IPNetRouter here, but you may want to check out the competition (both software- and hardware-based) for yourself.

SonicWALL
<http://www.sonicwall.com/>
BeadleNet
<http://www.beadlenet.com/>
Macsense XRouter
<http://www.macsensetech.com/Product/mih120.html>
Vicomsoft
<http://www.vicomsoft.com/>
Sustainable Softworks
<http://www.sustworks.com/>

Although IPNetRouter can seem a bit cryptic at first, if you just want to do NAT there are clear instructions on the company's web site, and you'll be up and running in just a few minutes. Your gateway machine can use either one or two Ethernet cards, and there are instructions on how to set up either configuration. The two-card setup is conceptually easier to understand, and offers a bit more security: one card connects to your local network and the other connects to the outside, so no information about your internal network configuration can leak to the outside world without going through IPNetRouter. Ethernet cards are cheap, so you may want to opt for this setup.

Getting Started with IPNetRouter
<http://www.sustworks.com/products/ipnr/gettingstarted/Guide.html>

This brings up another benefit of NAT: your gateway machine acts in part as a firewall, hiding your internal network from the outside world. In fact, from the outside it will appear as though there is only a single computer involved. This, in itself, makes it difficult to break into your internal computers; your private LAN can access the public internet, but not the other way around. If you want to go a little further and add some additional security measures, Sustainable Softworks has a page entitled Building Your Own Low Cost Firewall which will help you set up IPNetRouter for this. Finally, you can do almost the opposite, and "punch a hole" in your configuration to allow, for instance, a web server to operate from inside of your network. To do this, you set up IPNetRouter to do inbound port mapping, which routes all traffic destined for a particular port at your public IP address to a particular port on a particular machine on your internal network. This allows machines on the public internet to initiate connections to your internal web server; they think they are connecting to, say, port 80 of your gateway machine, but really they are being served web pages from port 80 (or another port of your choosing) of in internal machine. You'll probably need to do similar port mapping to use the QuickTime Streaming Server (but client machines can receive streaming QuickTime 4 content without any special configuration - support for this is built-in).

Building Your Own Low Cost Firewall
<http://www.sustworks.com/products/ipnr/gettingstarted/firewall.html>
Port Mapping
<http://www.sustworks.com/products/ipnr/gettingstarted/port_mapping.html>

So, for less than $90 I can connect multiple computers to the internet, and set up firewall protection for a web server. That's not bad, and best of all, it's fast. In my home setup, I'm using a PowerMac 7500/150 as my gateway, and there's no noticeable slowdown compared to when my internal Mac is connected directly to my DSL line. Part of the reason that IPNetRouter is fast is that it is Open Transport native (in fact, most of its capabilities are built into Open Transport already, and IPNetRouter just provides a way to configure them). But you also have to remember that this isn't a computationally intensive task - I believe that Cisco routers still use 68K-based processors. So even an old 68K Mac should give pretty good performance.

The pages mentioned above do a pretty good job of introducing you to concepts such as NAT, firewalls, and port mapping. You can get some more information on NAT from the KnowledgeShare section of Vicomsoft's site, or you can go directly to the RFCs and get the details.

Vicomsoft KnowledgeShare: Network Address Translation
<http://www.vicomsoft.com/knowledge/reference/nat.html>
RFC1631 - The IP Network Address Translator (NAT)
<http://www.faqs.org/rfcs/rfc1631.html>
RFC2663 - IP Network Address Translator (NAT) Terminology and Considerations
<http://www.faqs.org/rfcs/rfc2663.html>

So, again we've found a strategy that lets us use a spare Macintosh to save us the expense of buying new hardware to set up our network, adding IP sharing to our bag of tricks to go along with the printer sharing techniques we learned last month. Also, we've again solved a problem that developers will be especially likely to face: even if you plan to use only a single computer, if you are using Mac OS X Server then you currently need a second IP address in order to access the internet from the Blue Box. With a NAT setup this is no longer a problem, and you can use last month's printing trick at the same time by running Apple's LocalTalk Bridge on your gateway along with IPNetRouter - they seem to play well together.

As a final note, when you run into snags you should check out the Three Macs and a Printer web site, which contains a wealth of information about setting up a small network, and explains everything in simple terms. It covers many topics that I have not been able to touch upon, and it has recently settled in to its very own domain.

Three Macs & a Printer
<http://www.threemacs.com/network/index.html>

When you get tired of connecting everything together, take a gander at the other links available from the MacTech Online web pages at <www.mactech.com/online/>.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Together 3.7 - Store and organize all of...
Together helps you organize your Mac, giving you the ability to store, edit and preview your files in a single clean, uncluttered interface. Features Smart storage. With simple drag-and-drop... Read more
EtreCheck 3.1.4 - For troubleshooting yo...
EtreCheck is an app that displays the important details of your system configuration and allow you to copy that information to the Clipboard. It is meant to be used with Apple Support Communities to... Read more
Postbox 5.0.9 - Powerful and flexible em...
Postbox is a new email application that helps you organize your work life and get stuff done. It has all the elegance and simplicity of Apple Mail, but with more power and flexibility to manage even... Read more
DiskCatalogMaker 6.5.16 - Catalog your d...
DiskCatalogMaker is a simple disk management tool which catalogs disks. Simple, light-weight, and fast. Finder-like intuitive look and feel. Super-fast search algorithm. Can compress catalog data... Read more
TrailRunner 3.8.827 - Route planning for...
TrailRunner is the perfect companion for runners, bikers, hikers, and all people wandering under the sky. Plan routes on a geographical map. Import GPS or workout recordings and journalize your... Read more
VueScan 9.5.61 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
Postbox 5.0.9 - Powerful and flexible em...
Postbox is a new email application that helps you organize your work life and get stuff done. It has all the elegance and simplicity of Apple Mail, but with more power and flexibility to manage even... Read more
VueScan 9.5.61 - Scanner software with a...
VueScan is a scanning program that works with most high-quality flatbed and film scanners to produce scans that have excellent color fidelity and color balance. VueScan is easy to use, and has... Read more
DiskCatalogMaker 6.5.16 - Catalog your d...
DiskCatalogMaker is a simple disk management tool which catalogs disks. Simple, light-weight, and fast. Finder-like intuitive look and feel. Super-fast search algorithm. Can compress catalog data... Read more
TrailRunner 3.8.827 - Route planning for...
TrailRunner is the perfect companion for runners, bikers, hikers, and all people wandering under the sky. Plan routes on a geographical map. Import GPS or workout recordings and journalize your... Read more

Latest Forum Discussions

See All

Amateur Surgeon 4 Guide: Become the worl...
It's time to wield your trusty pizza cutter again, as Amateur Surgeon has returned with a whole fresh set of challenges (and some old, familiar ones, too). Starting anew isn't easy, especially when all you have at your disposal is a lighter, the... | Read more »
Le Parker: Sous Chef Extraordinaire (Ga...
Le Parker: Sous Chef Extraordinaire 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: | Read more »
Telltale Games really is working on a Gu...
Telltale Games' next episodic adventure is indeed Guardians of the Galaxy. A document tied to the voice actors strike suggested that the project was in the work, but now we have direct confirmation following an announcement at the Game Awards that... | Read more »
Amateur Surgeon returns to iOS and Andro...
Amateur Surgeon and its two sequels disappeared from the App Store some time and it was sad days for all. But now, just in time for the holidays, the Adult Swim favorite makes its joyous return in the shape of Amateur Surgeon 4, a remake with... | Read more »
The best board games on mobile
Sometimes you need to ditch all of the high speed, high action games in favor of something a little more traditional. If you don't feel like parting ways from your mobile device, though, there are still plenty of ways to get that old-school fix.... | Read more »
The best Facebook Messenger Instant Game...
Facebook's new Instant Games is now here, meaning you can play games with your friends directly via Facebook. It's a fun new way to connect with friends, of course, but it's also proving to be a solid gaming experience in its own right, with a... | Read more »
You can now play game's on Facebook...
Facebook launched its new Instant Games platform in an exciting new attempt to engage its user base. As a result, you can now play a number of different games directly through Facebook Messenger. All of these games run with HTML5, meaning you play... | Read more »
Apollo Justice Ace Attorney (Games)
Apollo Justice Ace Attorney 1.00.00 Device: iOS Universal Category: Games Price: $.99, Version: 1.00.00 (iTunes) Description: Court Is Back In Session Star as rookie defense attorney, Apollo Justice, as he visits crime scenes,... | Read more »
KORG iWAVESTATION (Music)
KORG iWAVESTATION 1.0 Device: iOS Universal Category: Music Price: $19.99, Version: 1.0 (iTunes) Description: A revolutionary new world of sound.The Wave Sequence Synthesizer for iPad - KORG iWAVESTATION | Read more »
Don't Grind Guide: Tips for becomin...
Don’t Grind is a surprising, derpy little one touch game with fun hand-drawn graphics. The goal is simple -- get the high score without being chopped to bits. That can be tough when you’re not used to the game, and that’s compounded by the fact... | Read more »

Price Scanner via MacPrices.net

Monday roundup of Holiday Mac sales: Up to $3...
Take up to $300 off MSRP on the price of a new Apple Mac at B&H Photo today as part of their Holiday sale. Shipping is free, and B&H charges NY sales tax only. Touch Bar MacBook Pros are in... Read more
12-inch WiFi Apple iPad Pros on sale for up t...
B&H Photo has 12″ WiFi Apple iPad Pros on sale for up to $50 off MSRP, each including free shipping. B&H charges sales tax in NY only: - 12″ Space Gray 32GB WiFi iPad Pro: $749 $50 off MSRP... Read more
9-inch Apple WiFi iPad Pros on sale for $20-$...
B&H Photo has 9.7″ Apple WiFi iPad Pros on sale for $20-$50 off MSRP, each including free shipping. B&H charges sales tax in NY only: - 9″ Space Gray 256GB WiFi iPad Pro: $779.95 $20 off MSRP... Read more
Holiday sale: Apple MacBook Airs available fo...
B&H Photo has 13″ MacBook Airs on sale for $100 off MSRP. Shipping is free, and B&H charges NY sales tax only: - 13″ 1.6GHz/128GB MacBook Air (MMGF2LL/A): $899 $100 off MSRP - 13″ 1.6GHz/... Read more
13-inch Silver Touch Bar MacBook Pro in stock...
Amazon has the new 2016 13″ 2.9GHz/256GB Silver Touch Bar MacBook Pro (MLVP2LL/A) in stock today and on sale for $1749 including free shipping. That’s $50 off MSRP, and it’s the lowest price... Read more
Parallels Toolbox 1.3 for Mac Offers 25 Singl...
Parallels has launched Parallels Toolbox 1.3 for Mac, an upgrade that adds five new utilities to the stand-alone application which was released in August and is available exclusively online at http... Read more
OWC Mercury Elite Pro Dual mini Ultra-Portabl...
OWC has introduced the new OWC Mercury Elite Pro Dual mini, a powerful yet ultra-portable dual-drive RAID solution. The new Mercury Elite Pro Dual mini packs phenomenal performance into a small... Read more
Clearance 13-inch Retina MacBook Pros availab...
B&H Photo has clearance 2015 13″ Retina Apple MacBook Pros available for up to $200 off original MSRP. Shipping is free, and B&H charges NY tax only: - 13″ 2.7GHz/128GB Retina MacBook Pro: $... Read more
Roundup of 2016 13-inch 2.0GHz MacBook Pro sa...
B&H has the non-Touch Bar 13″ MacBook Pros in stock today for $50-$100 off MSRP. Shipping is free, and B&H charges NY sales tax only: - 13″ 2.0GHz MacBook Pro Space Gray (MLL42LL/A): $1449 $... Read more
New 13-inch 2.0GHz Space Gray MacBook Pro in...
Adorama has the new 13″ 2.0GHz Space Gray MacBook Pro (non-Touch Bar, MLL42LL/A) in stock for $1499 including a free 3-year AppleCare Protection Plan. Shipping is free, and Adorama charges sales tax... Read more

Jobs Board

Lead *Apple* Solutions Consultant - Apple (...
# Lead Apple Solutions Consultant Job Number: 53586123 Pittsburgh, Pennsylvania, United States Posted: Nov. 28, 2016 Weekly Hours: 40.00 **Job Summary** The Lead ASC Read more
*Apple* Retail - Multiple Positions- Plano,...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Retail - Multiple Positions- Kansas...
Job Description:SalesSpecialist - Retail Customer Service and SalesTransform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
*Apple* Retail - Multiple Positions- Chicago...
Job Description: Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, Read more
Hardware Design Validation Engineer - *Apple...
The Apple Watch team is looking for a Hardware Design Validation Engineer. This person will be part of the Apple Watch hardware team with responsibilities for Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.