Security

Ask something
Discussion Locked

DNS security and Cable modem

0 helpful
4 replies

by david__ 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I would like some input on different ways to secure a 2000 server connected to a cable modem network.
Setup: single 2000 server running active directory and DNS server on a network of 6 XP pro stations. The server is the root DNA server for the forest. A Netgear router seperates a cablem modem from the network.
I would like pointers to setting up the server and workstations to allow for quick DNS resolution of local shares and internet addresses, and yet secure the DNS server from out side access.

4 replies

by inkster

You could possibly try either a low cost firewall, or proxy server, and install it between the cable modem and the network, that is if your cable modem is the connection to the internet or some larger network.

If you just want to keep the DNS Server secure, I suggest creating another zone known as a DMZ. Sonicwall has a nice small office firewall to do just that. Cisco also has some nice firewalls. Depends on your needs, budget and manpower.

by sbnetsec

Find out the difference between a firewall and a router and go from there to solve your problem

by aclopez5

First.. to mister "User Deleted": if you're not going to be helpful, don't post. Who said anything about a router being a firewall?

But, on that note, I would take a look at the NetGear router. They often have firewall capabilities. It may alsobe able to do network address translation, which makes hacking more difficult.

Inkster has some good ideas, if you have the budget for it.

However, even with all that in place, I would suggest looking at personal firewall products. There are many that are free for non-commercial use. BlackIce Defender is a popular one. I like Tiny Personal Firewall the best, but it's not very intuitive especially if you don't know firewalls.

by tcallagh

How good are you at *nix? Mainly, FreeBSD. FreeBSD is one the best OE out there. FreeBSD is secure too. This will be an extremely high level response, you can email me anytime for more info. Setup a FreeBSD box and either use ipfw or ipf and configure it to deny all. Then install squid (proxy), puch holes through the Firewall. You will have a firewall just as good as any other firewall. IMHO :)

This discussion is closed to new replies.