From: "Glenn Meadows" 

Yea, and if they monitor for intrusions, and all that, I think it's worth
it. We have a small Nokia box supplied by Qwest, and it also handles the
DMX for the mail server (3 ethernet ports on the box).  They setup all the
access rules, map the external IP addresses and such.  We have one external
contractor who does maintenance on one high dollar application, that needs
PCAnywhere access to one internal machine.  They setup a separate IP
Address from our public IP address, that maps directly to the internal
10.1.1.x, and only has the PCAnywhere ports available on that IP address. 
We just turn on PCA when they need access.  Then, when they're on that box,
they run Terminal Services onto the server that has the application, and
they don't know the Terminal services login passwords.


--
Glenn M.


"Geo"  wrote in message news:41dcb3a4{at}w3.nls.net...
> "Frank Haber"  wrote in message
> news:41dc898b$1{at}w3.nls.net...
>
> > to sniff around and see whether there are satisfied customers.  A grand
a
> year
> > seems a bit stiff, since there won't be much manging here - I doubt
> they're
> > going to open a bunch of different ports every week and play server.
>
> If they take care of all security patches for the devices and such then it
> might be worth it.
>
> Geo.
>
>

--- BBBS/NT v4.01 Flag-5