Hi, IMHO not, because that host should be very tightly controlled by the main firewall. If the DMZ only gets exactly the traffic that it is supposed to, then there shouldn't be anything for a local shorewall install to filter out.
On the other hand, maybe it's worth putting it on there just in case you ever put that host on the net without a firewall (e.g., if the firewall fails, and you need to make the services available until the replacement is there). I'm probably not the most qualified person to answer this, though :-). ~David On 5/25/07, mess-mate <[EMAIL PROTECTED]> wrote: > Hi, > i wonder if there is any need to install shorewall on a machine > located in the dmz zone of shorewaal. ( 3 interfaces example) > > > mess-mate > -- > > You are a fluke of the universe; you have no right to be here. > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users > ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
