Firewall Expert

[buzzhd]

Have more than 10 public ip addresses assigned to workstations and server. I try to set up a firewall by assigning one of the public ip to it. My question is can I just leave those public ips already on the wks and server without giving out private ips, but the firewall can still block those public ips from attacking outside? Can I just add a rule of blocking Lan from WAN? Thanks! Or is there any resource that I can take a look?

[DVNT1]

Yes in some cases. It will primarily depend on the firewall you are using and its modes of operation.
To relate, I have a Netscreen firewall that can be ran in a mode that is not seen by the untrusted side and will protect the machines on the trusted side very well.

[buzzhd]

I use 3Com Officeconnect 25. I heard someone said if I put this firewall unit after the router and set up every workstations behind this firewall, everything will be blocked out even I configure all wks with public ips. Is that right? Thanks!

[DVNT1]

Yes (but using the term "everything" very loosely)

You may want to read http://infodeli.3com.com/infodeli/tools/hubs/off-con/firewall/ug/modemeg.htm#1002736 for a sample configuration.

Keep in mind a firewall is only one piece of keeping your computer(s) safe. It typically won't stop common problems like virus/trojan infected files and application vunerabilities.

[buzzhd]

Thanks for the info, very helpful.