Peter,
I really see no big advantage to using a private address range in the DMZ. Since the
DMZ is usually used for Semi-protected systems that are publicly accessible, you would
need to convert these hosts to public addresses anyway. Save the private address
ranges/NAT for your internal private network.
> Hopefully somebody has the patience to answer the following beginner's
> question:
>
> Should the DMZ side be allocated a prime Internet adress or a private?
> There may be multiple answers to this question but are there
> preferences?
> We plan to have www, smtp, pop, calendar, ftp and webmail in DMZ.
> Internal to Internet is just normal NAT.
>
> -----------
> | |
> INET------| FW |------DMZ
> | |
> -----------
> |
> |
> |
> Internal
>
> Inet: Sub class C adress range
> Protected: Internal 192.168 network
> DMZ: ?
>
> Thank you in advance,
>
> Per olof
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
