Good multi-nat broadband firewall router

[GrimCracker]

I have DSL with five static IP addresses and currently do not have a firewall. After shopping around it seems that most broadband routers on the market only support very simple configurations, like NAT with one IP address.

I would like to find a firewall that allows me to map some internal IP addresses to specific static addresses and everything else to a default static. Some of the firewalls I've found that support this seem to do it via DMZ and I'm afraid that this will just result in the loss of most of the firewall features for those machines that are mapped to specific addresses.

Can anyone recommend a reliable multi-nat broadband router/firewall that lets me map internal IPs to specific external IPs without sacrificing firewall protection?

 

[Goosemaster]

how much are we talking here?

$$


Some options are cheap: Hackable Linksys WIreless Router AP about $50-80

some are not:

 

[GrimCracker]

Should have mentioned: I don't need wireless. I don't want to buy a PIX or anything, I was hoping to not spend more than 200 or 300 dollars.

 

[JackMDS]

If these 5 IPs are regular Entry Level DSL accounts, it probably can Not be used the way you would like too.

1. Combining them is Not a possibility unless the ISP agrees to set them (and I doubt that they even can) to be able to synchronize at the source and combine.

2. Fall Back, for few hundreds $$$ you can only get two WAN Router.

Two WAN Routers need Independent Modem on each connection. If your ISP is not specifically allowing you to use few Modems then it is Not practical to get a two WAN Router.

As you mentioned in your posting few IPs can be used for multiple DMZ purposes.

SMC 7004VBR ($45) can use up to External 10 IPs in the DMZ.

I know it is hard to accept, but this is the Reality of technology that isn?t regular plumbing.

:sun:

 

[GrimCracker]

What gave you the idea that I wanted to combine the externals? I have one DSL account that has five static addresses. I want a firewall that allows me to map certain internal machines to certain external addresses, rather than having all internal machines use one external address like most consumer firewalls require. I don't want to combine anything.

 

[wlee]

Have a look at the Zyxel Zywall-10W It's in your price range. It's a decent box, but like EVERY other box, it's gone through lots of firmware "growing pains" There are several users in the DSL Reports Zywall forum that can help you out with configs. 1<--->1 NAT with no overload should be no prob though.

 

[skyking]

If you have the hardware, and a few more bucks, you can build one of these,astaro security linux.
I am running the home demo version right now.

 

[mboy]

www.snapgear.com
Check out the SG 500, that should be in you r $4 rnage.
For the $$$, THEY CAN NOT BE BEAT!!!!!!

 

[Goosemaster]

Originally posted by: skyking
If you have the hardware, and a few more bucks, you can build one of these,astaro security linux.
I am running the home demo version right now.

nothing better than astaro. period. :beer: