Re: DMZ implementation

[David Ruben Elfi <dre@xxxxxxxxxxxxxxxxxxxxxxxx>]

Paulo:

> > First of all, have you static ip address on adsl? Check this first.
> > Implement services like that is a big problem if you not have static ip
> > address. 
> > 
> 
> Yes I will have a static IP, though there's a good way of doing the service
> implementation when not having one. At least I think it can be done 
> this way...
> Here is how I would do if I would have dynamic IP over my ADSL connection:
> Sign up for a dynamic DNS service, such as dyndns.org which is free.

 
Yes, you have this type of service, but think in one thing: dns
propagation.
A change in your ip number would be propagate over all routers on the
internet to make your service "on-line". This gap through actualizations
can be long if you have a critical service.

> Install the software in the gateway (unfortunatly, if I'm not wrong, the
> client they allow us to donwload is a binary and you cannot really know
> what is in it) and then just set some port forwarding policy to 
> your DMZ servers.
> 
> Just a thought though...
> 
> Regards and thanks for the reply,
> 
> P. Abrantes
> ------------------------------------------------------------------------
>      To unsubscribe email security-discuss-request@linuxsecurity.com
>          with "unsubscribe" in the subject of the message.

Good Luck.
-- 
David Ruben Elfi
Network and OS Administrator
Cooperativa Obrera Ltda.
Gerencia Sistemas - Zelarrayan 562
Te +54 291 4560084 - Bahia Blanca
          Choose your future. Choose to sysadmin.

------------------------------------------------------------------------
     To unsubscribe email security-discuss-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.