Article View: alt.comp.malaysia
Article #14Re: Setting a DMZ firewall
From: John Burton
Date: Thu, 29 Nov 2001 15:04
Date: Thu, 29 Nov 2001 15:04
33 lines
2792 bytes
2792 bytes
Mohamad Termizi wrote: > Hi ALL, > > I am setting a DMZ firewall with the following setup. > > eth0: a.b.c.66/30 attached to a ADSL router at a.b.c.65/30 > eth1: x.y.0.1/24 local IP addresses (LAN) - with FTP/Web/Mail servers > eth2: x.y.1.1/24 DMZ > > Questions: > > 1. Can this DMZ actually works? If yes, appreciate a email sample of > firewall script. > > 2. Should someone having problem if he/she FTP'ing from the Net? From LAN? > > TIA. > > ...termizi Depends upon what x & y are. We have a similar DMZ setup, except that the DMZ is part of the address block we got from our ISP so that it is accessible from both the Internet and the private LAN. Our "public" Mail, Web, and FTP servers are located on the DMZ so that they can be accessed from either the LAN or the Internet. Our LAN is private and uses local IP addresses to facilitate not being visible from the outside. Through the magic of IP masq, machines on our private LAN can search the web and access outside machines, but nobody can "see" those machines. Feel free to contact me for more information. John
Technical Details
Message-ID:
<3C064E63.5142AB88@gats-inc.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!newsxfer.visi.net!206.246.194.34.MISMATCH!sydney.visi.net!not-for-mailReferences:
<3c05a7bf_1@news.tm.net.my>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f53c1,27ab38a631bf2ec9 X-Google-Attributes: gidf53c1,public X-Google-Thread: 102b32,27ab38a631bf2ec9 X-Google-Attributes: gid102b32,public X-Google-Thread: 102983,27ab38a631bf2ec9 X-Google-Attributes: gid102983,public X-Google-Thread: f9b51,27ab38a631bf2ec9 X-Google-Attributes: gidf9b51,public X-Google-Thread: 10669a,27ab38a631bf2ec9 X-Google-Attributes: gid10669a,public X-Google-Thread: 10acab,27ab38a631bf2ec9 X-Google-Attributes: gid10acab,public X-Google-Thread: 1103af,27ab38a631bf2ec9 X-Google-Attributes: gid1103af,public X-Google-Thread: 10d671,27ab38a631bf2ec9 X-Google-Attributes: gid10d671,public X-Google-ArrivalTime: 2001-11-29 07:00:41 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!supernews.com!newsfeed.direct.ca!look.ca!newsxfer.visi.net!206.246.194.34.MISMATCH!sydney.visi.net!not-for-mail Message-ID: <3C064E63.5142AB88@gats-inc.com> From: John Burton <j.c.burton@gats-inc.com> Organization: GATS, Inc. X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.13-0.6custom i686) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: alt.comp.malaysia,aus.computers.linux,comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.networking,comp.os.linux.setup,de.comp.os.linux.networking,jaring.os.linux Subject: Re: Setting a DMZ firewall References: <3c05a7bf_1@news.tm.net.my> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 35 Date: Thu, 29 Nov 2001 10:04:03 -0500 NNTP-Posting-Host: 66.109.70.67 X-Trace: sydney.visi.net 1007046655 66.109.70.67 (Thu, 29 Nov 2001 10:10:55 EST) NNTP-Posting-Date: Thu, 29 Nov 2001 10:10:55 EST