The question is how do I allow both external and internal nodes to
access a host system without compromising the security of my internal
network. Answer, I put it in a DMZ and set up separate access rules for
exterior nodes and exterior nodes. Now if the shared host system is
compromised it does not entirely compromise the security on my interior
I'll leave the MS proxy questions for others to answer. Any takers?
> -----Original Message-----
> From: Itai Dor-on [SMTP:silicom @
> Sent: Sunday, November 23, 1997 6:06 AM
> To: 'firewalls @
> Subject: DMZ + MSPROXY - Explained
> I am having trouble to understand the propose of a firewall with a
> _DMZ _
> (in terms of an extra security defense layer).
> Furthermore is it possible to configure such a DMZ with Microsoft
> server 1.0 / 2.0?
> Any response would be most appreciated.