Protection for ISP server setup

Discussion in 'General' started by l:x, Dec 13, 2006.

  1. l:x

    l:x New Member

    Hello,

    I want to install some (read: two) ISPConfig servers to host some websites/webstuff of me and my friends. (like real ISP's :p)

    We have fixed IP's (C-class, isn't it?) that we can assign to this servers.

    I have one question about protection of the servers: how do you put these servers behind a firewall? Do you install individual firewall software on them or do you put a computer (Gateway/Proxy/... I don't know how it is called) in front of them? In the latter case, do you put them in a DMZ or so?

    Code:
     ^^^^^   uplink  |----|          |----|
    < WWW >----------| FW |----------| S1 |
     vvvvv           |----|-----|    |----|
                                |
                              |----|
                              | S2 |
                              |----|
    
    I would prefer putting them behind one managable firewall, so you don't have to configure every server seperatly.

    Anyone has some suggestions? Links? Tips?

    Most of the information I find on the Internet is related to putting a firewall between the internet and a LAN, but this isn't the case here because the servers need a public accessible IP.

    Thanks in advance!!!
    Greetz,
    lx
     
  2. falko

    falko Super Moderator Howtoforge Staff

    ISPConfig comes with a firewall that you can use on your servers. Anyway, if you open only the ports you absolutely need (25, 80, 81,...) there's no real need for a firwall.
     

Share This Page