A good basic philosopy would be to divide your service approach
in the following manner
1) Deny everything
2) Allow service list (telnet, ftp, http, whatever) all inside may access
all outside (Service flow direction, not packet flow).
3) Allow specific service for all inside to X, Y, and Z outside
(Example, outside net news server, or other contracted general service)
4) Allow specific service for a, b, c inside to x, y, z outside
(Specific contracted service - Resume' search for example to Personnel)
BobK
|
|
