Firewall'less Router

[fatcat6499]

I need a router with OUT a firewall if anyone could tell me one I would appreciate it

 

[JohnWill]

Since the NAT layer is the primary firewall component in a router, and it's necessary to allow more than one computer to share the single public IP address, what you seek doesn't exist. The closest you can come is by putting one computer in the DMZ to allow full access to the Internet.

 

[fatcat6499]

how do i do that?

 

[JohnWill]

In the router configuration, you pick an IP address from your local network and configure it in the DMZ. Look at your router's manual or help for specific instructions, it obviously varies for different brands.

 

[5mi11er]

Well, they do exist, and it is possible to run NAT without running a firewall, it just happens to be very easy to add firewall capabilities to NAT function. Since specific actions must happen for NAT to work at all, adding rules to not allow those actions to happen means traffic doesn't flow, hence a simple firewall.

The easiest solution for him might be to just configure the firewall to allow everything. This is relatively simple to do, generally one or two rules long (allow everything in and out, or allow everything in, allow everything out).

fatcat, what kind of router are you looking for? Right now, we're assuming a SOHO broadband router used to connect to cable modems or DSL modems. If you're talking about Frame or T1 type access, that's a whole different ball game, and most routers for that don't come with a firewall unless you specifically want a firewall added.

-Scott

 

[Monstrous Mi]

I don't think you can buy a personal router that does not have a firewall. Since the router inspects the IP headers, it is easy to put a port filtering firewall into the router. Most routers come with no firewall rules installed so they are open in this regard.

However, since routers use NAT, it is inherently impossible (well very difficult) by default to access a computer behind the router, regardless if there is firewall present or not. You need to set up port forwarding or you need to put the computer in the DMZ.

 

[5mi11er]

Well, to access computers behind the NAT, you'll need 1 static IP for every box, and you'll need to configure static NAT for those IP's to point to the NATed addresses. But, then we're assuming that's what he's trying to accomplish by removing the firewall.