NetBIOS into DMZ

From: Stephan (stephan@advirt.com)
Date: 09/10/02


From: stephan@advirt.com (Stephan)
Date: 10 Sep 2002 02:48:35 -0700

Hi All.

I'm currently responsible for the firewall setup at the company I work
for, and am having a major discussion with several Technical
Architects about the design of a new mail solution that we are
implementing.

The current proposal is to have a mimesweeper gateway in the DMZ. The
management of the box would be from the internal network over NetBIOS
connections and remote control software. The machine would be backed
up, and two way connections on at least 10 ports need to be enabled
for this to work.

Would I be right in thinking that if the content filtering is done on
a server inside the network, with an SMTP relay in the DMZ, not
requiring backups or management, it would be a more secure solution?

Thanks in advance,
Stephan



Relevant Pages

  • Near and far dmz (is this model secure)
    ... connections from the outside) which forwards it to exchange servers. ... outside or DMZ into the internal network. ... internal network and does not trust it on the DMZ (i can see his side of it ...
    (comp.security.firewalls)
  • Re: Near and far dmz (is this model secure)
    ... > need access from the internet to the server. ... > the DMZ. ... >> connections from the outside) which forwards it to exchange servers. ... >> outside or DMZ into the internal network. ...
    (comp.security.firewalls)
  • Re: convincing a client to go with dotNet instead of Access project
    ... That would be good documentation to have... ... > -learning curve for language, APIs, deployment management, etc ... > -Access really tops out with performance after six concurrent connections ... >> I believe a dotNet solution is better, but I'm trying to be as ...
    (microsoft.public.dotnet.general)
  • Re: Unable to join AD domain from DMZ network
    ... > the captured traffic between the server in DMZ to the DC from internal ... >> unless you lock it down to a specific port. ... >>> authentication from DMZ to 2003 AD internal network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Near and far dmz (is this model secure)
    ... I think that your boss is right, the Exchange servers should be on the ... in a DMZ via VPN tunnel. ... connections from the DMZ to the internal network, ...
    (comp.security.firewalls)