[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Firewall DMZ
hi, if you have enough IP-addresses it's not a problem to use public IP-addresses in a DMZ, if you don't have enough IP-addresses you can use NAT to hide several inside-IPs on one external IP. cheers reinhard At 16:44 09.09.2003 -0400, you wrote: We are looking to create a dual firewall environment (external and internal). In the middle will be the DMZ. Are DMZ IP addresses typically hidden from the outside world? Aside from hiding this network from the outside world, are there any additional advantages? I'm assuming that if I'm hiding the DMZ addresses, I will need to NAT them. Are there any security issues to NATing for inbound services (i.e. www)? Or is it recommended to simpy route the DMZ IP addresses?
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|