On Sat, Feb 25, 2006 at 12:21:56AM +0530 or so it is rumoured hereabouts,
Anil Kamath thought:
>> I need to know how to actually initiate the connection to the ISP thru IPCOP
> and how will my private LAN communicate with the DMZ incase i plan to put
> the DNS web and mail in the DMZ.
Communication between your LAN and DMZ should be only ever in one
direction. You should use ssh from your LAN to your DMZ for updating the
website. You should use fetchmail with odmr {on demand mail relaying} to
retrieve from your mail server. That way, if somebody compromises your
DMZ, they don't have access to your LAN.
Conor
--
Conor Daly <conor.daly at cod.homelinux.org>
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS/G/S/O d+(-) s:+ a+ C++(+) UL++++ US++ P>++ L+++>++++ E--- W++ !N
PS+ PE Y+ PGP? tv(-) b+++(+) G e+++(*) h-- r+++ z++++
------END GEEK CODE BLOCK------
http://www.geekcode.com/http://www.ebb.org/ungeek/
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!