I'm having a dilemma about how to set up a webserver on an existing network.

Current config:

Internet
    |
    |
Firewall
    |
    |
Internal Network (clients, file servers, database server, etc)

I have a PostGres database (replicated from our production database) on a separate box that I'd like to access from an apache webserver using PHP4 (on Redhat 7.1).

My question(s):

For the best security, where do I put the webserver (inside or outside the firewall)? And for either option, what is the best way to secure the webserver from the Internet and local network and allow secure transactions to the database server?

For the best security you would put it on the inside and just put a static mapping on your firewall. Make sure you limit the open ports on that static. What kind of firewall?

As far as the DB goes...i dunno. Is the DB server on the inside of the same network? If so, then what exactly are you trying to secure?

OpenBSD firewall

DB server is on the inside of the same network. I guess that part of the question was only for if the webserver is "outside the firewall"

Thanks

cool...

I know nothing about *nix/BSD firewalls, all I work with are Cisco PIX. Can you point me in the right direction to get a start with UNIX flavor firewalls?

Thanks,
jason

Can't really help you there. I didn't set up the firewall, and I don't know much about Linux firewalls either, but I'm learning as I go! Good luck!