> >Internet <-> Firewall (only port 80 & 443 open) <-> IIS Front-end box >running ASP.NET <-> Firewall (only 80 open for .NET remoting) <-> Data Tier >box (running .NET remoted components) <-> Firewall (only SQL Port (1433?) >open) <-> SQL Server Cluster.
I would move the remoting to a different port. Too easy for a Web Server that is not locked down to be accessed once port 80 is already open. Might as well just move the port. You can read messages from the DOTNET archive, unsubscribe from DOTNET, or subscribe to other DevelopMentor lists at http://discuss.develop.com.