On Thu, Sep 20, 2001 at 07:22:42PM +0300, Togan Muftuoglu
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> Althouh I have not yet installed SME5 by reading the manual I was not
> able to find any info regarding placing SME5 in DMZ. The options are
> still "server and gateway" or "server only" and in the later there are
> no ipchains rules for protection
Yes. This has been clearly stated many times, including in devinfo.
> i) Has anyone done anything as placing SME5 or e-smith 4.1.x in DMZ and
> applying ipchains
>
> ii) If the answer for opt i is no which templates need to be adjusted so
> ipchains for DMZ can be started
The simplest solution is to install a second Ethernet card and use
"server and gateway" mode.
You may be able to do funky things with swapping the Ethernet card
assignment and using "unknown" for eth0, but this has not been tested,
and is not supported.
We have thought about a co-lo/DMZ mode, but it is not in the
SME Server V5 release.
Thanks,
Gordon
--
VP Engineering
Network Server Solutions Group http://www.e-smith.com
Mitel Networks Corporation http://www.mitel.com
--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
