[ILUG] New project.... for Sunday

[Dave Airlie]

Firewall/dialup box should always be a separate box from the
web/mail/samba servers... 486 should be good enough for most FW tasks...

I'm not saying you can't secure everything on one box.. but it is a
nightmare... last place I did this I use a 486DX33 to route mail and
firewall, and an internal server to the processing mail/samba etc..

Dave.

On Wed, 21 Feb 2001, Wynne, Conor wrote:

> Hi all,
>
> This sunday, I am installing a new network in a small web designers...
>
> Anyway, it will have a DNS server / DHCP server / and an internal web server
> / Samba server / proxy + Firewall / Mac's too (I know how to do this now -
> thanks guys)
>
> Internal IP address of 192.168.x.x
>
> They have a Server - not Compaq :( , but I'll not hold it against them, and
> they would like run all these services together on the same machine
>
> They have ISDN for the proxy + firewall, but I am wondering about security.
> Should they be running all this together?
> I am aware of the security issues with DNS and how to fix it, but I am
> talking about general network security?
>
> Should we use a small machine for a dedicated firewall and proxy?
>
> Also I have never set up ISDN on linux, is it easy enough or a real pain?
>
> They will be using RH7 (their preference), but we could use SUSE7 or
> Mandrake 7.2 or whatever...
>
> What do y'all think?
> CW
>
>

-- 
David Airlie, Software Engineer
http://www.skynet.ie/~airlied / airlied at skynet.ie
pam_smb / Linux DecStation / Linux VAX / ILUG person