eBlue, Sacra Blue Online Magazine
Number 207 — October 1999
eBlue site map, home, help
SPCUG Logo
The Meeting Report

Edited by
Edwin Holloway
Recorded by
Gary
Photography by
Mark Naber
and
Peter Robinson
Transcription by
Crystal Friedrichs
and
Dennis Damitz

Thanks to the Volunteers Who Make It Happen and Beadlenet Provides a Compact Firewall


President Frank Leonard opened the meeting by praising the many people who come early to set up the meeting room, including Ken Hopkins, Milt Hull, Edwin Holloway and Gary Sloan. He also thanked Marsha Leonard, Membership Director and Mrs. President, and Shirley Peterson, who give their time to add new members and handle membership issues. If you have any questions or problems with your membership, call or e-mail Marsha. Another person who helps with meeting set-up by arranging volunteers is Stan Morris, Volunteer Coordinator. Frank reminded everyone that these people are "just the tip of the iceberg of those who give a lot of their own time to get these meetings off the ground."

Frank then introduced our new editor, Chris Graillat, who talked about Sacra Blue. Chris said that members can contact her about the Consultants' Corner. The Consultants' Corner is for members who would like to place a short classified ad about their businesses in "the Blues." There is no cost for the ad. Frank later made one small clarification about the Consultants' Corner: it is a benefit for SPCUG volunteers only. So if you want to increase visibility of your computer-based business, consider volunteering for SPCUG and placing an ad in the Consultants' Corner.

Chris also reminded everyone to use the Classified Ads if they have anything to sell. If you want to clear out your old computer stuff, e-mail Chris with your ads by the next General Meeting.

We have quite a few members on our Mentor List, which is published bimonthly in Sacra Blue and and is available continuously in eBlue. The Mentor List is a great benefit for members who can get advice from fellow members about all types of software or hardware. Chris noted that there have been difficulties contacting some members because of outdated information so if you are on the list, or you run a Chapter or SIG, she asked that you be sure your contact information is updated so members can readily reach you.

Chris is also looking for some people to fill some jobs. Producing all the material for our award-winning newsletter (thanks to Eric!) takes more than one person. We need a Lead Meeting Reporter and transcriptionists. We also need an Advertising Manager so we can increase our ad income. And, most importantly, we could use more contributors. If you're interested in writing an article, please let Chris know. She is also planning to do a survey when she has production down a little better to find out if Sacra Blue is serving you.

When Chris asked the audience whether anyone had received Sacra Blue yet, it turned out no one had. Apparently the printer who handles the mailing had some problem with the list. Chris is going to talk to them and find out why and how we can avoid this problem in the future so all members receive the newsletter on time.

Next up to the microphone was our very own Webmaster and Software Librarian, Brian Smither. Brian gave members an update on the three new volumes in the Shareware Library. In Volume 16, he put RDESK, made by IDESK. It was programmed specifically for researchers by a very well-known academic research librarian. It has an integrated Web browser and word processor, email and Telnet clients. It is built around modules, and each module is of a specific discipline. For example, it has a genealogy module, which gives you instruction and guidance on how to do academic genealogical research, places to go and things to see, people to contact and everything you need to trace your family tree. The American Librarians Association is giving it rave reviews and Brian thinks it's very worth while.

In Volume 19, Brian has put VTUNER, a small Internet application that gives access to over 1,000 Internet-based radio stations. You can listen to a radio station from Australia, the Netherlands, Poland, Chile, England, South America, South Africa, India, wherever someone has put a radio station on the Internet.

Volume 43 contains a small typing tutor called FASTYPE. Of all the typing tutors he has looked at, Brian likes this one the best. In response to a question from the audience, Brian said he is 95% sure it will handle a Dvorak keyboard [but has later discovered it doesn't. For more on these programs, see Brian's article in this issue.-Ed.]

Frank suggested to contact Brian if anyone runs across software that would be eligible for the library, or might be something he hasn't seen.

Beadlenet, Beadlenet, Beadlenet
Olivier Taupin, Vice-President of Sales and Marketing at BeadleNet, followed up last month's SPCUG discussion on high-speed connections with a presentation on his company's product, a security firewall. As more and more users seek high-speed connections with cable and DSL modems, system breaks-in will become more common. BeadleNet offers one solution to keep your systems secure.

There are firewalls and then there are firewalls. At September's meeting, Olivier Taupin of BeadleNet, LLC in Laguna Hills explained his company and its product: a security firewall to protect us from those baddies who want to break into our small-office and home networks. As more of us begin to use cable modems or DSL (digital subscriber line) connections that offer "always connected" links to the Internet, it becomes easier for hackers to break into our systems. BeadleNet's security software and hardware is intended to keep hackers out.

BeadleNet is the offspring of PEP (Productivity Enhancement Products), a ten-year-old engineering company. PEP uses RF (Radio Frequency) and other wireless technology to handle security encryption on the Internet for large companies, Amtrak and Bank of America among them. One such application: PEP supplies a device called a "Palm Cradle" that helps the U.S. Postal Service track data on parcel delivery. Postal workers use handheld scanners, which are actually Internet devices, and dock them in the "Palm Cradle" every evening to download and upload information.

PEP began BeadleNet in January of this year because it noticed that no other corporation was focusing on security for small-business or home networks. Small companies may be very dependent on Internet access and exposure for economic survival, so ensuring the security of their connections is quite important. Also, many individuals and small businesses these days want to use cable modem connections to allow five or six computers to simultaneously share one connection to cyberspace. Sharing a connection can be useful, but it has a distinct disadvantage: the computers are open to the outside world. If you have file or printer sharing turned on, your neighbor, whose modem is connected to the same cable, can read what's in your files or printer as if they were an extension of his own network. Your neighbor doesn't even have to be a hacker.

Feeling Insecure?
These are not the only ways into your systems. Cyberspace is insecure. Did you know there are over 440 bulletin boards and 1,900 Web sites just for hackers? If you search for hackers on your browser, and you will find sites offering programs to allow you to hack into your neighbor's PC. Taupin warned that even if print and file sharing are not enabled, it is very easy to find your IP address and hack your system through a hundred other ports. Analog modem connections present much less risk since you get a different IP address each time you log on, and you log off before hackers can get in. Also you're on your own computer and can see immediately if you're being hacked.

So, do we need to worry if the IP address is at our ISP's location? The ISP is less at risk than the home network. When we dial up, we get an IP address just for that connection, and it is gone when we hang up. If the hacker gets the address, he can't use it later; it is gone. With DSL and cable modems, the risk is much greater because the address is somewhat permanent. The hacker has a much better chance of getting at it the next time he tries.

Empower Yourself
The point is, of course, if you plan to use cable or DSL, you need the protection of a firewall. As Taupin explained, BeadleNet's firewall offers an inexpensive security solution that is universal, simple, and self-installing. The product is expandable and upgradable to keep up with ever-changing protocols, the latest anti-virus software, and firewall technology. You will always have the latest firmware. Wherever you are, your upgrade is automatic because you can purchase new features online. Your firewall will not be obsolete in a year.

Machines using Windows especially need firewalls since Windows is not a secure environment. On a network, the first machine, usually one running Windows, is the one that would be hacked. A number of software firewalls like WinGate are available, which is better than nothing, but the WinGate program is not one you can easily install yourself.

If the whole neighborhood is using cable modems, everyone shares the same bandwidth (this is not true for DSL). If everyone logs on at the same time, the system gets slower. To efficiently use the bandwidth, a router acts as a gatekeeper, letting in only those messages with the proper address. It also can relay information in packets. Hardware firewalls, which are primarily routers, are easier. There are different ones available. Cisco, for example, makes one that offers very good protection for $30,000, but a normal router starts at around $1,500. Still, most are complex, need a technician and programmers, and are industrially oriented.

Easy Options
To respond to several consumer needs-simultaneous access to the Internet, firewall protection, affordability, simplicity, and expandability-BeadleNet offers a hub, router, and IP-sharer in one product, at a comparatively inexpensive price. Its next generation product, which the company hopes to release by the end of the year, will include the DSL or cable modem inside the product. Two models are the SOHO2000 and the Home2000.

The SOHO2000 only uses Ethernet and is best for small offices. Prices are around $350 or, for more than 175 users, in the low $600 range. The Home2000 should be available by press time and, as the name implies, is designed for home use. It gives you the choice of a USB or Ethernet connection or a HomePNA (Home Phoneline Networking Alliance) interface. With HomePNA, you can even use your current phone wiring to network while simultaneously accessing your telephone service. The Home2000 can be set up to use a wireless link as well. Both boxes are independent of the operating system. They work with Linux, Mac OS, Unix, and Windows 95/98/NT.

What's Really in That Little Box Anyway?
The firewall box includes the router, phone-line networking (for the Home2000), IP-sharing and the firewall itself. An integrated, four-port, Ethernet 10BaseT hub connects up to four PCs or can cascade hubs behind it (the SOHO2000 will allow up to 175 computers to be networked using external hubs). The box is self-configuring using a technology called DHCP (Dynamic Host Configuration Protocol) for IP address discovery. Most cable and DSL modems offer DHCP so they can get an IP address assigned by the ISP. BeadleNet's box acts as a DHCP server as well and can automatically assign an IP address for every machine in your network.

Milt interjected with a question for the audience. He asked how many had hubs at home. Quite a few raised their hands. Milt explained that you cannot have more than four hubs daisy-chained together. Once you go past four, you may have collisions or other difficulties.

Taupin explained that the firewall works in different ways. First, it does IP masquerading: it hides your own IP address from systems on the outside. Nobody will know the IP address of any of your PCs. They will know only the IP address of the firewall itself. The firewall can prevent any further access by outsiders. It uses NAT (Network Address Translation) to allow more than one computer to share the single Internet IP address. It uses Stateful Packet Inspection (SPI) to prevent unexpected TCP packets from getting through to the network. Every time you make a request for an FTP, Real Video or Real-Audio packet (for instance), the router will log it on the way out and then, when the reply packet comes back, recognize that your PC made the request. Stateful Packet Inspection will allow the reply to pass through the firewall. If there was no request, the unexpected packet will not be allowed to pass through the firewall. If you have a Web or FTP server behind the firewall, it opens pinholes in the firewall to allow the necessary information to pass through to the right PC. Since it is a hub, you can share resources inside the network, but since it is also a router, you can share IP addresses.

Getting the Latest Scoop and Round-the-Clock Protection
Because the hardware is the same for every system, BeadleNet can keep prices low. The software configures the hardware for each specific case. The software, in fact, has all the features in it. To turn on the features you want, you can download the appropriate encryptokey from the company's Web site in a matter of seconds. Currently, you order the encryptokey by telephone, but soon you will be able to use your credit card number to turn on the feature. Resellers will also be able to update a server when it is sold or installed by downloading the latest code. Also, every time BeadleNet changes the code, it will send an announcement on users' Web pages prompting them to download the latest firmware.

Taupin noted that BeadleNet also provides customer support 24 hours a day, seven days a week. The company regularly updates its Web site and allows customers quick access to maintenance upgrades, which are free.

On the Cutting Edge
Taupin continued his presentation with a description of BeadleNet's latest products. Because the company is young, many new products are on the way. The company is still working on a solution for NetMeeting, video conferencing, and H323 Protocol, but expects to have a solution in a few weeks. It plans to be the first to offer video conferencing through a firewall, which is extremely difficult to achieve. Taupin also told us that BeadleNet offers an upgrade to provide VPN (Virtual Private Network) capability. A VPN allows secure communications between two host systems over a public, unsecure, network. This is usually achieved by using "security gateways"-hardware devices on each "side" of the public network that encrypt the data sent from one gateway to the other-and by using a separate pair of IP addresses (for the two communicating gateways) to hide the actual sending and receiving hosts' IP addresses (providing a virtual tunnel) so no one can access the information being transferred. Beadlenet is working on L2TP (Layer 2 Tunneling Protocol) with Cisco and PPTP (Point-to-Point Tunneling Protocol) with Microsoft and hopes to have software and hardware upgrades for VPN in the future.

Additionally, BeadleNet is developing an IP Sec (IP Security Protocol) product where security control is done at the "network" layer as opposed to the "application" layer. BeadleNet offers one more unusual product, the 4P, which is both a configurable firewall and a Web DMZ (demilitarized zone), developed at the request of Cox Cable. Cox wanted an extra IP address with a DMZ, which is essentially like having two different networks. The second IP address can be used for NetMeeting or a system that is not protected for certain purposes.

Taupin also told the audience that within the next year, some wireless solutions will be inside the firewall box. The box will have Home Phoneline Networking Alliance (HomePNA) connectivity as well, a new networking solution that uses your telephone wires to connect your PCs. HomePNA uses the high frequencies on your phone wires, voice calls use the low frequencies, and DSL uses the middle frequencies. Some companies (Compaq, Dell and Gateway) are starting to offer PCs with HomePNA cards installed. The speed is limited to 1Mbps today, but next year the new version will be 10Mbps. For more information, visit HomePNA.

Don't Miss Out on This Deal
Taupin concluded his presentation with a generous offer to give SPCUG members a discount of 10%. You'll have to call him directly (tel: 949-348-4276, fax: 949-348-4230) though, because his sales people don't have the authority to give that price. And hurry for this limited-time offer!

Q&A
Members had many questions for Mr. Taupin following his presentation. Here's a summary of the interaction.

Q: Will the PNA network interfere with line 2 on a two-line system? Some caller-ID units will disable line 2. If a two-line phone uses a single cable plugged into the jack, will the PNA network interfere with the other line? Telephone jacks have four wires. Does the PNA device have four wires? Are the four wires connected all the way through?
A: The two telephone lines are independent; the PNA link uses only one line. You can't tell if all four wires are connected.

Q: If you have a DSL that uses two wires and the voice line uses two wires, how does the PNA work?
A: Telephone wires are capable of carrying different frequencies that do not interfere with each other. Voice uses the low frequencies, DSL the middle and HomePNA the high. PNA is independent of the modem. HomePNA uses the interior phone wiring to form a PC network connecting all PCs in the home. A POTS splitter splits the line that goes to the DSL modem through an Ethernet or USB connection. Over the different frequencies, you can talk on the phone, have four PCs on the Internet on the DSL and send a job to the printer all at the same time.

Q: Will I need a LAN card, a modem and the ISP from my telephone company for the DSL if I have your hardware?
A: No. The modem will be in the box. For additional PCs, you'll need a NIC, a HomePNA or USB adapter.

Q: Do we have to wait for the new box with the DSL modem built in, or is the current box upgradable?
A: The current box is not upgradable; you will have to wait. For now, rent your cable or DSL modems rather than pay $300 for something that will be $50 to $100 soon anyway. The price should be about $299.

Q: Right now there are DSL, ADSL, HDSL and SDSL. PacBell uses a different type than Roseville Telephone. Which one will yours support? Will you have to sell different boxes for different telephone companies?
A: The big leader right now is Alcatel, who uses ADSL. Other companies are choosing either SDSL or HDSL. (Ken interjected: "The answer seems to be 'Who knows'?")

Q: A non-technical question: Obviously this product will do a lot. Are you a publicly traded company? If not, when is the IPO?
A: Our first investments are from "angels." We are doing a second round with venture capitalists and are raising between $5 million and $7 million. Investors are welcome; the minimum is $10,000. We hope to have an IPO within the next two years.

Q: What is BeadleNet? Is that the owner's or president's name?
A: Yeah. We wanted to honor our founder. He is a very shy, high-level engineer who is the owner of the mother company. His name is Dan Beadle. He didn't want the name at all, but we just did it.


Copyright © 1999 Sacramento PC Users Group, Inc. All rights reserved.
Read our disclaimer and copyright page for more information.