"Peter Crosland" <(E-Mail Removed)> wrote:
>> In fact I wonder why people pay £1000 for firewalls from people like
>> Cisco. I suppose with Cisco you can do very detailed config, using
>> timed access lists and such...
>
>The name perhaps?
In your opinion, what equipment would I need to run an in-house
www/email/ftp/dns server?
This is not a high profile corporate site which somebody is going to
have a go at, but some prankster just might, looking for customer
emails containing credit card numbers or whatever. So it has to be
very secure. The initial proposal was a Pix firewall, then the server,
then another Pix firewall and the office LAN behind that. So the
server sits in an DMZ. This appears to be a standard setup.
In fact there is no need for the office LAN to have any connection to
the server (thus eliminating the 2nd Pix). Any server admin can be
done as it would be done remotely: over the internet, telnet over SSL.
The only reason we would like there to be a piece of wire is because
we want to route all outgoing emails via the email server, where their
To: headers can be scanned for whitelist compilation purposes.
The present limit of my expertise is setting up an 803 ISDN router
with an access list which stops Blaster attacks keeping the line up

For the above, I was going to get somebody in; not to get it working
but to make sure it is really done right.
The office LAN will get its internet access via something like a
Draytek 2600 - NAT itself should be secure enough for simple www
browsing??
Peter.
--
Return address is invalid to help stop junk mail.
E-mail replies to
(E-Mail Removed) but remove the X and the Y.
Please do NOT copy usenet posts to email - it is NOT necessary.