Help with Linux DMZ What is it? & Howto?

kool_kid · 10-24-2007, 09:55 AM

Hiya

i have 3 NICs in my linux machine which is configured as load balancing and failover for internet. Now i want to know what is DMZ and how do i set it up also if i setup a DMZ how many ips can i give that DMZ access to? Help Please.

FYI: im using CENTOS with Kernel 2.6

farslayer · 10-24-2007, 11:31 AM

Code:

Internet
     |
     |
(public / Internet)
     |
     |
   <eth0>
firewall-<eth1>-------(DMZ)-------Web Services
   <eth2>
     |
     |
(private / Internal LAN)
     |
     |
Rest of the PC's on your LAN

Quote:

In computer security, a demilitarized zone (DMZ), more appropriately known as demarcation zone or perimeter network, is a physical or logical subnetwork that contains an organization's external services to a larger, untrusted network, usually the Internet. The purpose of a DMZ is to add an additional layer of security to an organization's Local Area Network (LAN).

Generally, any service that is being provided to users in an external network should be placed in the DMZ. The most common of these services are web servers, mail servers, and DNS servers. In some situations, additional steps need to be taken to be able to provide secure services.

How many IP's..... Depends on how many you have..

I have 32 Public IP's from my ISP so aside from the one used by the, network, gateway(host), and Broadcast address, I guess that leaves 29 Public IP Addresses I can map to services hosted in the DMZ..

I don't really think there is a limit, other than how many IP's you have...

kool_kid · 10-24-2007, 03:01 PM

Thank you but could u please redirect me to a tut in which it shows how to configure it.

farslayer · 10-24-2007, 07:30 PM

http://www.linuxguruz.com/iptables/howto/

http://www.fwbuilder.org/ - Gui front end for 'building' iptables script.

http://www.aboutdebian.com/firewall.htm

http://www.debian-administration.org/articles/73

theres some starting info...

kool_kid · 10-26-2007, 05:29 AM

Thank you very much