Hey,
I should clarify that the mail server in the DMZ would not be your
IMAP / POP server. It would handle the AV and SPAM and then forward good
mail your internal corporate mail server.
Michael
Michael Gale wrote:
Hello,
A DMZ / SSN (Separate secure network) is where you would put
servers that require access from internally and externally.
So example you setup a firewall with 3 interfaces:
External
DMZ
Internal
Now on the DMZ you may place your company mail server for example. All
mail from the Internet would come in and be forwarded to the server in
the DMZ. This way if the mail server is compromised the intruder will
have not gained access to your internal corporate network. A company
web server would be another example, but not a intra net web server.
The firewall rules between EXT <=> DMZ should be as secure as
possible, same with DMZ<=>INT.
I hope this helps clear some things up a little.
Michael
P theodorou wrote:
Hello
I want to achieve the firewall script in the official iptables tutorial
1.20 version practices here
http://iptables-tutorial.frozentux....MZ.firewall.txt
typically a well known set up is
to receive traffic from the ISP via dhcp which assigns IP to eth0
and eth0 forwords traffic to eth1 (NAT) which is the default gateway
for a laptop .
Now the machine has eth0 eth1 and eth2 so far we have spoken
for eth1 . Eth2 i wanted to be a DMZ for servers who need passive
connections
FTP etc...
The concept of DMZ confuses me , can you suggest any resources
for the topic ?
Really appreciated
