-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello Stuart,

It all depends on how paranoid you are.

For most home networks, putting the web server inside the network and
just forwarding port 80 to that system would be fine.  Apache is pretty
decent, and as long as you haven't screwed around with it too much, you
won't open up any security holes of any significance.  Just don't
forward any other ports to any system, and you should be fine.

Of course, the exercise of setting up a DMZ with a third NIC can be fun
and interesting in and of itself.


JBB

Sunday, November 18, 2001, 6:12:32 PM, you wrote:

SL> Sorry if this is not so RedHat specific. I have a home network with 5
SL> PCs connecting to a DSL connection through a RH 7.1 machine that serves
SL> as a router/firewall. I want to add a web server, but do it in a secure
SL> way. I was thinking about adding a third network card to the
SL> router/firewall, put the web server on a separate private network, and
SL> route web requests to that machine. Alternatively (and way simpler for
SL> me) would be to put the web server on the same network as the other
SL> machines and do port redirection of all traffic directed to port 80 to
SL> the web server. Is this latter method safe enough?

SL> I don't expect detailed answers to this. Just some appropriate links
SL> would be fine.

SL> Thanks.
SL> ______________________________________________________________________
SL> Stuart Luppescu         -=-=-  University of Chicago
SL> ��? ������������(EUC)  -=-=-  [EMAIL PROTECTED]
SL> http://www.consortium-chicago.org/people/sl/sl.html
SL> PGP public key: www.consortium-chicago.org/people/sl/pubkey.asc
SL>        ICQ #21172047  AIM: psycho7070





- --
Best regards,
 Jonathan                            mailto:[EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (MingW32)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjv4+mIACgkQxQhxe/20cF6sngCeN5Mpim8WdHUHU70CAuldvaWy
NA4An2CDTAgOBXhBmA0Fg7ycAh0006zh
=qlhi
-----END PGP SIGNATURE-----



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to