-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Tom,
I think you got told wrong. You can without any problems host web or
other SSL services behind a firewall capable of doing Network Address
Translation (NAT). I'm not sure what you mean by reverse hosting, I
assume reverse proxying. Even then you should be able to use SSL
(heck, you can access SSL protected websites through a proxy, why not
the other way around?).
There are a bunch of 'cheap' solutions available. RRAS from
Microsoft, FreeBSD or Linux with IP filtering options. There are also
several so called 'personal firewall' software packages around. Of
course they may not provide you with the features and gadgets you
might want for hosting servers, but from a security perspective that
will get you started. For professional hosting I suggest you do take
a look at a more professional firewalls.
Regards,
Frank
- -----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 11, 2000 11:40 PM
To: [EMAIL PROTECTED]
Subject: Building a secure hosting solution
Hi all,
I am a newbie to firewalls and security and need to ask all of you
which is the best route for me to go.
I need to find a cheap solution to providing web, email, dns and
database security for external NT servers while also maintaining my
high level of security to my internal network. Currently I am using
reverse hosting, but with SSL for email and web hosting, I was told
that I need to get these servers on external IP addresses.
My funds are limited, otherwise I would check out a couple of the
major contenders, checkpoint, etc. My budget presently is for <
$1000. Any comments, feedback, solutions, books and website would be
great. Many of the books I looked at in the library talk more about
internal network security than for external devices.
Thanks in advance,
Tom
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.1
Comment: PGP or S/MIME (X.509) encrypted email preferred.
iQA/AwUBOb27FkRKym0LjhFcEQJpyQCgxh4vMTCz66QXYdUOie4KQG7GEMsAoI8N
ACZFPMsEEw63WOmHAvuodHn5
=wQs4
-----END PGP SIGNATURE-----
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
