thx, i was about to ask for recommendations, i'll read this and see what coherence i can bring to this site
On Mon, Mar 28, 2022 at 4:30 PM Go Canes <letsgonhlcan...@gmail.com> wrote: > On Mon, Mar 28, 2022 at 3:11 PM Jack Craig <jack.craig.ap...@gmail.com> > wrote: > > On Mon, Mar 28, 2022 at 7:22 AM Go Canes <letsgonhlcan...@gmail.com> > wrote: > >> I've been reluctant to contribute as well, due to not really > >> understanding the setup. But given the Cable Modem was replaced, I've > >> been wondering if this is as simple as the prior modem being in > >> "bridge mode" - i.e. passing all traffic without usingg NAT or routing > > > > > > i had thought of using the firewalls of both the ATT rtr & NH firewalls > passing through > > http & https. also i thought bridge mode wsa a security risk??? > > *Anything* exposed to the internet suffers the security risk > (including your web server). If the NH (Nighthawk, I am assuming) is > running in "firewall" mode, putting the Cable Modem in bridge mode > moves the risk from the Cable Modem to the Nighthawk. IMHO, *you* > control the updates to the Nighthawk, so you can make sure it is > up-to-date. Your ISP may or may not keep the Cable Modem up-to-date. > > Since you have two firewall/NAT routers (if I have understood things > correctly), you might consider connecting all the Internet exposed > systems to the Cable Modem (assuming it has multiple ports), and put > your private systems behind the Nighthawk. > > Crude diagram of what I am suggesting that may or may not survive > formatting.....: > > ISP - Cable Modem -| - Web Server > | - something else that needs to be > publicly accessible > | - Nighthawk -|- laptop > | - desktop > > (and I have no idea if this fits in with how your ISP has your IP > subnet configured - I am starting with a clean slate.) > _______________________________________________ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure >
_______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure