Personally - I try not to deploy domains in DMZ's. This is due to running a domain often opens up additional security concerns due to more services running to support the domain. Typically if one of the boxes in the domain gets compromised the rest of the boxes are sure to go. Not to mention it adds an additional level of complexity in regards to managing it.
Having boxes as standalone in the DMZ allows you to harden each of them with separately and run them independently. However, depending on the requirements/needs a domain in the DMZ might be worth the additional risk that one presents. Darrell ------------------------------------------- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. ----- Original Message ----- From: "Martin Schaible" <[EMAIL PROTECTED]> To: "IMail Forum" <[email protected]> Sent: Saturday, April 02, 2005 8:51 AM Subject: [IMail Forum] OT: Web/Mail Server in a Windows Domain > Hi, > > My question is a bit off topic. > > We're planing to rebuild our server farm right now. Actually our servers are now in a > workgroup in a DMZ. > > I "heard", that internet servers should not be in a domain, but i can't see any reason why > not. > > We're planing to install 5 new dedicated servers for IMail/SmarterMail, IIS, BlueDragon, > etc. > > My big question is: Domain or Workgroup? > > -- > > Mit freundlichen Gr�ssen > > -------------------------------------------- > Merlin Consulting > Martin Schaible > Bahnhofstrasse 27 > CH-8702 Zollikon > > Phone: +41 44 391 30 00 > Fax: +41 44 391 32 49 > > Mail: mailto:[EMAIL PROTECTED] > URL: http://www.merlinconsulting.ch > Support: http://support.merlinconsulting.ch > > GPS: N47 20.235 E8 34.226 > -------------------------------------------- > News - Neue Produkte: > > .:. Kiwi Syslog Monitor > .:. Paessler GmbH > .:. Sawmill Loganalyzer > .:. SmarterTools > -------------------------------------------- > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
