Re: Firewall/DMZ and placement of database

[Jose Nazario]

On Fri, 16 Mar 2001, Ola Samuelson wrote:

> I have ONE database, it has to be one and only one, no replication or
> such. It has to accessible from the webservers in DMZ and from the
> private net.

one of your biggest problems is going to be data leaks, no matter if you
are successful in getting this set up. you most likely have data that
should stay within the company, ie client records, trend analysis of sales
and such, that not just ANYONE should have access to. by leaving this data
in the DMZ you are allowing the chance that someone will be able to walk
your database and walk away with your private, hard earned information.

split you databases, put only public information in the DMZ and keep
everything else in the private network.

____________________________
jose nazario                                                 [EMAIL PROTECTED]
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]