-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Saturday 19 Jan 2008, bipin sartape wrote: > hi everyone, > wanted to know whether mail server and > web server (also others like ftp..)can be installed > inside the militarized zone(LAN) rather than a usual > setupin the DMZ zone. how will i achieve public access > to it and will it enhance my security aspect.
1. Yes, they can be set up behind the firewall. Search for ``port forwarding'' -- that's what you'll need to do to enable outside clients to access services behind your firewall. 2. Security... does adding a firewall somewhere in your network make your network more secure? IMNSHO, usually not. Network and system security is a process, not a product. Unless you clearly enumerate in black and white the following, you will never be able to achieve even a reasonably secure network: - What am I protecting? - What am I protecting it from? - What is the cost of losing what I am protecting? - What is the cost of protection? and only after that you ask the final question, - What tools and policies do I need to protect my assets? So please don't fall into the [firewall == security] trap -- that way usually lies disaster. Regards, - -- Raju - -- Raj Mathur [EMAIL PROTECTED] http://kandalaya.org/ Freedom in Technology & Software || February 2008 || http://freed.in/ GPG: 78D4 FC67 367F 40E2 0DD5 0FEF C968 D0EF CC68 D17F PsyTrance & Chill: http://schizoid.in/ || It is the mind that moves -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHkX6CyWjQ78xo0X8RAkXNAKCQht2unBW7gZymp5mrJLo/ckCvOwCghrwW vlvSa8tnIsajf9sa4sjYTSU= =WqWz -----END PGP SIGNATURE----- _______________________________________________ ilugd mailinglist -- [email protected] http://frodo.hserus.net/mailman/listinfo/ilugd Next Event: http://freed.in - February 22/23, 2008 Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi http://www.mail-archive.com/[email protected]/
