RE: [FW1] DMZ, why and why not?

[Neville Thomas <nthomas@uswebcks.com>]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


Well what I did was add a third network card in my firewall and have FTP
HTTP and such behind the third card so that it gives them a little more
protection then just behind your router as well as keeping them off your
network so that if they were compromised the Hacker would not be able to get
to your network.  I know this is not the official set up for a DMZ so lets
call it a DMZ+ ........

Neville Thomas
System Administrator
____________________________________
USWeb/CKS       http://uswebcks.com/
55 York Street, Suite 1500
Toronto, ON, M5J 1R7
Phone: +1 416 368 2222 x. 225  
Fax:     +1 416 366 6667
mailto:nthomas@uswebcks.com


 -----Original Message-----
 From: owner-fw-1-mailinglist@lists.us.checkpoint.com
 [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
 Pradeep Subramaniam
 Sent: September 7, 1999 1:49 PM
 To: fw-1-mailinglist@lists.us.checkpoint.com
 Subject: [FW1] DMZ, why and why not?




 Hi All,

 I am new to this mailing group, so if there are any etiquettes I have
 missed, do forgive me.

 I have recently installed and configured Firewall-1 for our LAN.
 Currently, I have our Internet Web server in the LAN and am doing
 address translation for external access.

 There are other servers that I would like to setup, ftp, DNS, etc.
 Before I do this, however, I would like to know if there are any
 advantages to creating a DMZ and having these servers in there than
 keeping them in the LAN, like the web server.

 Could anyone out there throw some light on this? Thanks.

 Pradeep.

 --
 Pradeep Subramaniam,                    |
 Senior Systems Administrator    	| You can fool some of the people
 Versus Technologies  Inc.		|   all the time, but not all the
 e-mail: pradeep@tradeit.com		|   people all the time.
 phone: (416) 214 7979 			|
 fax:   (416) 214 9065                   | - Yet another brilliant
 philosopher
 cell:  (416) 991 9625			|
 *******************************************************************
 ************


 ===================================================================
 =============
      To unsubscribe from this mailing list, please see the instructions at
                http://www.checkpoint.com/services/mailing.html
 ===================================================================
 =============




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================