Re: Need firewall advice

Hi there,


It is advised to have at least a firewall between your router and DMZ.
You can filter things with routers, but most only allow very basic filtering.

I don't have any experience with Watchguard or Sonicwall, so I can not  
give any meaningfull advice avout those.


I would also like to point out it is not a good idea to use a hub for  
your externally available servers.
In case of a compromise of only 1 system, all networktraffic on could  
be sniffed and valuable information obtained.
Although not 100% hack proof, a switch is a much better alternative.
A switch with private VLANs would be the next step...


Best regards,

Johan.




Quoting mattknows@gmail.com:

> I got attacked this weekend.  I run a small business network set up   
> thusly:  DSL router (static /24 DSL service) to hub.  Real IP   
> address servers for mail, dns, web. All internal servers,   
> workstations, etc. behind Linksys running VPN endpoint to my static   
> DSL at home so I can do remote admin, work, etc.  My linux servers   
> on the outside, several were compromised, from what looks like a ssh  
>  vulnerability.  Rebuilt servers with Trustix, running NO network   
> services but the daemon doing the servers job (DNS, etc.).  I feel I  
>  need something between the DSL router and hub that feeds the   
> external servers and the linksys.  Considering WatchGuard and   
> SonicWall.  Need advice on which, and on specific configuration.    
> Thanks!!