From: Ray Leach <raymondl@knowledgefactory.co.za>
To: Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: Re: Security question
Date: Mon, 01 Mar 2004 15:03:48 +0200 [thread overview]
Message-ID: <1078146228.13371.29.camel@raylinux.internal> (raw)
In-Reply-To: <404332A5.1000500@stupar.homelinux.net>
[-- Attachment #1: Type: text/plain, Size: 1205 bytes --]
On Mon, 2004-03-01 at 14:55, Sasa Stupar wrote:
> What is the potential security problem if you have network as follows:
>
> SOLUTION 1
>
> INET-CABLE MODEM-----------------|
> ROUTER-eth0-public IP address----|
> ROUTER-eth1-private IP address---|------->SWITCH
> ROUTER-eth2-private IP address---|
> Internal server for mail,web-----|
> all LAN users with private IP----|
>
>
> SOLUTION 2
>
> INET-CABLE MODEM-->eth0-ROUTER|--eth1|
> --eth2|-->SWITCH
> server and LAN users|
>
> I am thinking of the solution 1 because cable modem is a little bit to
> far away from the router and I don't want to use to much of the cables.
> I have setup router with MAC address filtering and also put firewall on
> all internal computers.
>
> What is possible security problem comparing the 2 solutions above?
>
Depends what firewall/packet filtering capabilities eth0-ROUTER has ...
> Regards,
> Sasa
--
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
next prev parent reply other threads:[~2004-03-01 13:03 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-03-01 12:55 Security question Sasa Stupar
2004-03-01 13:03 ` Ray Leach [this message]
2004-03-01 13:10 ` Antony Stone
-- strict thread matches above, loose matches on Subject: below --
2007-11-21 8:01 security question mabbas
2004-06-03 15:06 Martín Chikilian
2004-06-03 15:12 ` Antony Stone
2004-06-02 12:58 Andreas Westendörpf
2004-03-01 22:24 Security question bmcdowell
2004-03-01 22:47 ` John A. Sullivan III
2004-03-01 13:41 question Sasa Stupar
2004-03-01 14:25 ` Security question Sasa Stupar
2004-03-01 15:08 ` Antony Stone
[not found] <3D207AD4.B1D7546E@gmx.net>
2002-07-01 18:47 ` Gavin Laking
2002-07-01 15:52 Oliver Ob
2002-04-11 12:23 Grigory Batalov
2002-06-15 11:15 ` Bart Oldeman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1078146228.13371.29.camel@raylinux.internal \
--to=raymondl@knowledgefactory.co.za \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.