A general guideline is only put machines in the DMZ if you want people on
the Internet to have access to them. Obviously, your dev. server and SQL
server do not fall into this category. You can set up your web server in the
DMZ and foward port 80(and 443 if SSL) to it from the firewall. The other
servers can sit behind the second firewall and you should configure your
secondary firewall to tunnel the sql connections to your sql server.
>From: "Martin Modahl" ">mmodahl@resnet.gatech.edu>
>To: ">ale@ale.org>
>Subject: RE: [ale] network security
>Date: Mon, 24 Apr 2000 11:59:34 -0700
>
> I'm no where near a network expert, GaTech Freshman, not even Computer
>Science Major, but I'll be setting up a similar network this summer and I
>have a few questions. So far I have it drawn up like this:
>
>t-1
>to a
>cisco 2600 router
>to a
>[DMZ] including WebServer, Mail Server, Primary DNS, Development Server &
>NAT box to serve internet connections to the office staff.
>
>Where should I add the SQL server? Would the Development Server be better
>behind the NAT/firewall box? Does my overall plan make sense?
>
>Martin
>--
>">mmodahl@resnet.gatech.edu
>http://r73h65.res.gatech.edu
>
>
>
>-----Original Message-----
>From: ">owner-ale@ale.org [mailto:">owner-ale@ale.org]On Behalf Of Jeff
>Hubbs
>Sent: Monday, April 24, 2000 7:43 AM
>To: ">strider@scifi-fantasy.com; ">ale@ale.org
>Subject: RE: [ale] network security
>
>
>What I'm alluding to is essentially a DMZ. I don't automatically refer to
>a
>three-NIC Linux/ipchains firewall by that term because when I first saw the
>term used, it was in the context of two separate hardware firewalls with a
>Web server etc. in between the two. On the surface of it, I feel like the
>three-NIC ipchains approach would be vastly preferable w.r.t. versatility -
>the kind of versatility you could probably only obtain with three hardware
>firewalls the "old" way.
>
>- Jeff
>
>--
>To unsubscribe: mail ">majordomo@ale.org with "unsubscribe ale" in message
>body.
________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
--
To unsubscribe: mail ">majordomo@ale.org with "unsubscribe ale" in message body.