[ale] HELP NEEDED - Comcast cable Modem and linux-centric home network

[mike at trausch.us]

On 07/19/2012 12:49 PM, JD wrote:
> Forget about the SMC and only use YOUR router to manage everything.

It is difficult to do, since you cannot install a firewall between the
SMC and the IP addresses that you have allocated.  At least for two of
the sites that I manage with Comcast's business class service, CC pushed
out some sort of a firmware or configuration update that has forced the
SMC device to be able to see the destination using ARP, or it will
return ICMP errors to the senders of packets to such addresses.

This didn't used to be the case; I used to have the SMC box plugged into
a firewall system at both locations, with the rest of the network on the
other side of the firewall.  But both networks stopped functioning when
they pushed whatever update they pushed, and the only way I could get
around it was to connect the things that use the static IPs directly to
the device (or bridge them directly to the device).  This is really
irritating, and it also prevents me from holding an IP address aside to
assign to a dial-in (PPP) session.  Oy.

	--- Mike

-- 
A man who reasons deliberately, manages it better after studying Logic
than he could before, if he is sincere about it and has common sense.
                                   --- Carveth Read, “Logic”



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 729 bytes
Desc: OpenPGP digital signature
Url : http://mail.ale.org/pipermail/ale/attachments/20120720/4b134783/attachment.bin