Security

Ask something
Discussion Locked

DMZ desing & implementation

0 helpful
7 replies

by sadiqah

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We would like to build and extend our LAN to expose some services (MS Exchange 5.5 with OWA/MSSQL7 & other systems) to the Internet. We would like to utilize Linux as router & firwall and if any other function required. Any one can help ous making the blueprint of this network and the required static IPs, hardware and software.

Appreciate any help.

7 replies

by erikdr

I'm afraid DETAILED design will require a consultant, and whether you can get that for free is doubtful. However you can come a long way by asking vendors (Linux-specialised in your case) for a pre-sales offer including drawings etc.

For a high-level design, you will find enough on the Internet; both in general searches (phrase 'DMZ' or so) or as whitepapers from vendors like Cisco or Checkpoint. Leave out the product names and focus on the functions. A few headlines:
* Three-homed (both inner and outer fwall on one machine) or separate machines?
* Proxies, and yes then in one or two directions?
* Ports to expose
* Level of management wanted (e.g. intrusion detection).

Hope thiz helpz,

- The Netherlandz

by sadiqah

I did not ask for detail, just overall view of one who had experience in this issue. Anyway, thanks Mr. Erik and appreciate your effort.

by sadiqah

These are excellent resources that helped me in the design and implementation phases of the project. Thanks alot Jesse:-)

This discussion is closed to new replies.