I have a winNT domain running at work on a LAN(this really isn't a windows Q). Some users bought a linksys router to isolate themselves from the rest of the network and block out certain ports. however the router issues internal ips to the machines and now they can't see the rest of the domain. I was wondering if hardware firewalls issue internal IP or can they just block out ports and still let the machines under it still use 'real' IP's?

**If anyone knows why they can't see the domain, feel free to let me know.**

I really don't want to use individual firewalls for each machine.