What you can do is set the server in "server and gateway" mode.

You will need two net cards.

If you want to access any management features - use ssh port forwarding or
VPN to connect to it.

If you want to allow unrestricted access from an office, add the office in
questions live side firewall IP address as a "Local network" to the DMZ
server with a subnet mask of 255.255.255.255

I would suggest doing a search of the domino list - BEFORE asking as this
has been discussed many times.  Use my name or Kai's as a search phrase
along with co-host.

Cheers,
Richard.


----- Original Message -----
From: "Togan Muftuoglu" <[EMAIL PROTECTED]>
To: "e-smith-devinfo" <[EMAIL PROTECTED]>
Sent: Friday, September 21, 2001 2:22 AM
Subject: [e-smith-devinfo] SME5 in DMZ


> Hi,
>
> Althouh I have not yet installed SME5 by reading the manual I was not
> able to find any info regarding placing SME5 in DMZ. The options are
> still "server and gateway" or "server only" and in the later there are
> no ipchains rules for protection
>
> i) Has anyone done anything as placing SME5 or e-smith 4.1.x in DMZ and
> applying ipchains
>
> ii) If the answer for opt i is no which templates need to be adjusted so
> ipchains for DMZ can be started
>
> TIA
>
> --
> Togan Muftuoglu
>
>
> --
> Please report bugs to [EMAIL PROTECTED]
> Please mail [EMAIL PROTECTED] (only) to discuss security issues
> Support for registered customers and partners to [EMAIL PROTECTED]
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> Archives by mail and
http://www.mail-archive.com/devinfo%40lists.e-smith.org
>
>


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to