[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Multiple nics on inside of DMZ

On Thu, Nov 14, 2002 at 01:55:59PM -0600, Miller, Jeff - x3328 wrote:

> Although I'm new to netfilter I haven't found anything that will keep
> this idea from working. However it is a lot of setup, and I've never
> really heard of anyone doing this before (except maybe on small
> firewalls where the DMZ is a single port on a lone firewall). Further
> complicating things is the fact that there will be around a dozen
> machines in the DMZ, requiring multiple quad NIC's. Any feedback on
> this crazy approach would be appreciated, thanks!

My firewall script takes this approach to creating a DMZ.  However, I
also go a littler further and only allow the DMZ systems to respond to
outside requests.  So, they can respond to any external request that
reaches them, but they can not initiate a connection to something
outside their subnet.

Jamin W. Collins

Reply to: