I'm sorry, I don't understand the relationship between my comment and your
response. It reads like "I disagree" followed by agreement.
Not CCing to the list because I'd rather figure out what you thought I said
or meant before making with public comments.
> > > Is putting your web server behind your firewall I wise thing to do?
> > An *external* web server, no.
> I disagree. You can put your web server in the DMZ when that web
> server has to interact with a database on the other side of the
> internal firewall. The internal firewall allows that one system (in
> the DMZ) to connect to the database system via one TCP port (proxy).
> Since everything behind the intenet firewall is RFC1597 numbered (I am
> using a Cisco/NTI PIX) and the router is set to block those from the
> internet side, I have no problems with this.
Follow-Ups:
References:
|
|