Article View: comp.security.firewalls
Article #496Re: NT server software firewall for clients ?
From: - AJS
Date: Tue, 22 May 2001 18:57
Date: Tue, 22 May 2001 18:57
34 lines
2923 bytes
2923 bytes
"Mario Desiderio" <mandm@flashnet.it> wrote in message news:3B0583C3.ED7B93DA@flashnet.it... > Hello, > > I have an NT server and many clients connected to it, this clients can > go out to the internet. > > I want to have some kind of NT security setup if possible or some > firewall kind of software to buy in order to set a list of web sites > were a given client can go. (SNIP) Hi Mario, You're actually asking 2 questions... maybe 3. Certainly there are 3 separate processes involved in what you want to do. So, for a small network (rash assumption, I know) and only the 1 server you mentioned, here's what I'd do: MS Proxy Server for web access - use 2 NICs. - Install Black Ice Server Agent as firewall. www.networkice.com IIRC - DNS Services - list only the websites you want your clients to see. Point the Proxy at this DNS instead of a valid Internet DNS. (Set DNS on a second IP bound to the internal NIC). I personally hate the idea of putting DNS on a Proxy box. Get a second server and put your DNS there. Make sure it is behind the proxy (not touching the internet directly). Then make sure that the only way to reach the internet from you LAN is through the proxy. Warning, maintaining a custom DNS like that can be high maintenance, especially if your users are a whiney lot ;^) Good luck. - AJS
Technical Details
Message-ID:
<3b0ab5c0$0$14701@wodc7nh1.news.uu.net>Path:
arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!news.tele.dk!144.212.100.101!newsfeed.mathworks.com!news.mathworks.com!uunet!ash.uu.net!spool0.news.uu.net!reader1.news.uu.net!not-for-mailReferences:
<3B0583C3.ED7B93DA@flashnet.it>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,689037d4c69de652 X-Google-Attributes: gidfa2c1,public X-Google-Thread: f922c,689037d4c69de652 X-Google-Attributes: gidf922c,public X-Google-Thread: 106691,689037d4c69de652 X-Google-Attributes: gid106691,public X-Google-Thread: f977f,689037d4c69de652 X-Google-Attributes: gidf977f,public X-Google-Thread: f782f,689037d4c69de652 X-Google-Attributes: gidf782f,public X-Google-Thread: 102e85,689037d4c69de652 X-Google-Attributes: gid102e85,public X-Google-Thread: fa335,689037d4c69de652 X-Google-Attributes: gidfa335,public X-Google-ArrivalTime: 2001-05-22 11:53:55 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!supernews.com!news.tele.dk!144.212.100.101!newsfeed.mathworks.com!news.mathworks.com!uunet!ash.uu.net!spool0.news.uu.net!reader1.news.uu.net!not-for-mail From: "- AJS" <asmith@no.spam.daanorthwest.com> Newsgroups: comp.security.firewalls,fa.firewall,comp.os.ms-windows.nt,comp.os.ms-windows.nt.setup,comp.os.ms-windows.nt.admin.networking,comp.os.ms-windows.nt.admin.security,comp.os.ms-windows.nt.admin.misc References: <3B0583C3.ED7B93DA@flashnet.it> Subject: Re: NT server software firewall for clients ? Date: Tue, 22 May 2001 11:57:37 -0700 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Lines: 36 Message-ID: <3b0ab5c0$0$14701@wodc7nh1.news.uu.net> NNTP-Posting-Host: 63.126.177.6 X-Trace: reader1.news.uu.net 990557632 14701 63.126.177.6