Virtual OS/2 International Consumer Education

January 1999

[Features]
editor@os2voice.org
[Previous Page ] [Index] [Next Page ]
VOICE Home Page: http://www.os2voice.org


InJoy Gateway 1.0


By: Mark Dodel - madodel@ptd.net


If you have a cable modem or another LAN connection to the internet and want to provide access to other clients on an internal LAN, then this OS/2 version of NAT is well worth checking out. InJoy Gateway is the initial component of the InJoy Firewall which is from Fx Communications the developer of the InJoy internet Dialer - http://www.fx.dk/firewall/welcome.html.

This is not a proxy server, but an OS/2 implementation of NAT (Network Address Translation), which provides transparent access for clients on an internal TCP/IP network (not just OS/2 clients, but any client running a TCP/IP stack). this means you don't have to configure the applications on the clients to use a proxy. Previously I had run IGate, which provides very good proxy support, but entails a great deal of configuration of the apps on the client as well as the proxy server itself if you want more then just basic HTTP and FTP access.

Installation:

The initial install involves unzipping the download file (170K) - ftp://ftp.bmtmicro.com/bmtmicro/ijgwy1_0.zip and running the install.cmd on the computer that is connected to the internet. The install process asks whether you want to Install or un-install, then asks you to choose which LAN adapter is connected to the internet access (in my case a cable modem). It then updates your PROTOCOL.INI file and replaces the driver for the selected LAN adapter with the fxwrap.sys driver under [tcpip_nif] settings and adds an [FXWRAP_nif] settings to the end. These settings bind the original NIC to the virtual NIC driver provided by the InJoy Gateway. It also updates the CONFIG.SYS by adding the line DEVICE=C:\IBMCOM\MACS\FXWRAP.SYS. The install also copies fxwrap.sys to your c:\IBMCOM\MACS directory and makes a backup of PROTOCOL.INI and CONFIG.SYS prior to the above changes. The install also creates a folder with an Uninstall object as well as the InJoy Gateway object, registration objects and an information folder which contains a text documentation as well as a couple of URL objects for obtaining online information from the Fx website.

Should you encounter a problem after rebooting, you can boot to a command prompt and run an uninstall.cmd to back out the changes. I encountered no problem at all doing the install.

How it works:

Once installed, you need to reboot to activate the network changes. Then depending on how you have your internal ip addresses assigned, you may or may not need to modify the brief configuration file to allow your clients machines access. The sample configuration file comes defined for use with internal net using the 192.168.0.0 series of IP addresses. So if you are using a different series (10.x.x.x or 172.16.x.x) you will have to modify this. Then just start the InJoy Gateway object on the internet connected computer. An OS/2 window will open telling you it has started successfully and allowing you to shut it down by hitting any key while the window has focus. To keep from accidentally shutting it down I minimize the window after checking that it started ok. I start the InJoy Gateway by placing a shadow of the object in my Startup Folder.

You have to make sure that the internal LAN clients are configured to access the server running the InJoy Gateway as the default router (Gateway), IPGATE has to be set to ON, and there must be a properly configured name server entry. Other then that you don't have to re-configure any apps. in my case since I was using a proxy server, I had to un-configure the changes required to use apps like Communicator, EMTEC FTP client and MR/2 ICE with a proxy. The documentation goes into a couple of methods of configuring an internal TCP/IP network; one with 1 LAN adapter and the other with 2 LAN adapters on the Gateway machine.

The InJoy Gateway intercepts all ip traffic sent to/from the internal clients, and as long as the originating ip address is the same as that in the configuration file, the ip addresses are "masqueraded" and passed to the network connection attached to the internet. As long as you have an entry in the Gateway config file, this will block outside access to your internal clients from any source other then the specified ip addresses. Since there is as yet no GUI or accounting/reporting modules, any attempts to access your internal network from other then your defined IP addresses displays in the Gateway VIO window.

Final Points:

I had first tried the InJoy Gateway when it was still in beta. I had ran into one problem with the install, which was quickly fixed by the Bjarne Jensen the developer. As soon as this product went GA I registered it. I have only found one app that didn't work with the Gateway - Attachmate Extra running on NT 4.0 with a proprietary SNA connection for mainframe access. All other apps I tried including Communicator 4.05 on NT, Communicator 4.04 on OS/2, MR/2 ICE and JStreet Mailer for mail, GT-IRC 3.0 and VIRC for IRC, Emtec FTP client and NCFTP 2.3.0 for FTP and ProNews/2 1.5 for News. The only problem I found was that in GTIRC the client ip address was not translated. I reported this to Bjarne, and he said it will be fixed in the next update.

In the FAQ at the Fx InJoy Firewall site, there is a message saying that it has only been tested with about 8 different network cards. I happen to have one of the cards on the list. i'm not sure what if any problems other network cards may create, so if you don't have a NIC yet, you may want to check the list. I am very pleased with my Kingston KNE40-BT card, as well as the several other Kingston NIC's I have used. They all have OS/2 drivers included on the install disk as well as a DOS configuration program that runs under OS/2. since this is a shareware product, if you already have a NIC then try it. If you have problems then contact Fx. They seem very interested in supporting OS/2 users.

Currently the Gateway is the only released component of the InJoy Firewall. Other planned modules include a GUI frontend, a firewall plugin, an accounting module, and a filter plugin. Pricing for these additional components is not yet been listed, but they are all shown as expected to be released in 1st quarter 1999.

If you are looking for a drop in solution to give access to your cable modem or xDSL connection to the internet for your local LAN, then InJoy Gateway is a great solution. If you want to do more fine tuning of what the clients can access then you will want a more complicated solution like Maccasoft's Internet Gate proxy server - http://www.maccasoft.com. Another advantage to IGate is that it is free for a one client connection use. Having used both products, I registered InJoy Gateway.

The InJoy Gateway is available in several licences based on number of users (clients connected). The 2 client license is $20, 5 client - $40, 10 client - $70, 25 client - $150, 50 client - $200, 100 client - $300, 500 client - $1400. According to the web site the license is valid for all updates up to v2.00 or the end of the millenium which ever comes first. You can register it at your favorite OS/2 shareware retailer including BMTMicro - http://www.bmtmicro.com and http://www.mensys.nl


[Features]
editor@os2voice.org
[Previous Page ] [Index] [Next Page ]
VOICE Home Page: http://www.os2voice.org