[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Accessing machines behind a firewall

On Tue, 16 Mar 1999, Mike Schmitz wrote:

> I am helping out a local ISP who has a few NT boxes live on the internet
> serving up web pages.  We realize how insecure this is and would like to
> firewall them, allowing only web and/or ftp traffic.  Is this possible/
> desireable or does it just defeat the purpose of the firewall?

It's totally possible, and very desireable.  NT is notoriously hard to
really secure, particularly when open to the raw Internet ...  Even just
sticking a small router (Cisco 2500/1600) in front of them with some
strong ACLs in place would help.

Best of all, of course, would be a Debian/Linux firewall.  Any cheap old
486 laying around with 2 nics and a floppy would do the trick.  Take a
look at (sorry, don't have the URLs handy)

	Linux Router Project

Dean Carpenter		deano@areyes.com			94TT :)
Areyes, Inc.		Dean.Carpenter@pharma.com

"No matter where you go, there you are"  sayeth Buckaroo 								 across the Eighth Dimension

Reply to: