Re: DMZ howto

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hey,

I should clarify that the mail server in the DMZ would not be your IMAP / POP server. It would handle the AV and SPAM and then forward good mail your internal corporate mail server.

Michael

Michael Gale wrote:

Hello,

A DMZ / SSN (Separate secure network) is where you would put servers that require access from internally and externally.

So example you setup a firewall with 3 interfaces:

External
DMZ
Internal

Now on the DMZ you may place your company mail server for example. All mail from the Internet would come in and be forwarded to the server in the DMZ. This way if the mail server is compromised the intruder will have not gained access to your internal corporate network. A company web server would be another example, but not a intra net web server.

The firewall rules between EXT <=> DMZ should be as secure as possible, same with DMZ<=>INT.

I hope this helps clear some things up a little.

Michael

P theodorou wrote:

Hello

I want to achieve the firewall script in the official iptables tutorial
1.20 version practices here http://iptables-tutorial.frozentux....MZ.firewall.txt

typically a well known set up is
to receive traffic from the ISP via dhcp which assigns IP to eth0
and eth0 forwords traffic to eth1 (NAT) which is the default gateway for a laptop .

Now the machine has eth0 eth1 and eth2 so far we have spoken
for eth1 . Eth2 i wanted to be a DMZ for servers who need passive connections
FTP etc...

The concept of DMZ confuses me , can you suggest any resources
for the topic ?

Really appreciated






[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux