[Gllug] Firewalling

[Daniel Fairs]

>
> It depends on what your DHCP setup is :-) The computers on the DMZ
> (including the firewall) need real IP addresses if you want to access them
> from the Internet at large (unless you want to play about with port
> forwarding).

Sure, the publicly accessible servers need 'real' IP addresses. However, is
there any reason to give the NIC for the DMZ a public IP, as it will have a
public NIC anyway? So, to conclude, the 'internal' NIC and the DMZ NIC
should be DHCP'd, the external NIC should have a real IP, and the machines
in the DMZ should (of course) have a real IP. Correct?

Cheers,
Dan


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug