Re: [cobalt-users] Can I use Raq3 as Firewall with 3 NICs cards?

[Ould <ouldm@xxxxxxxxxxxxxxxxxxx>]

Thanks for reply,

"Rodolfo J. Paiz (E-mail)" a écrit :

> > I'm already setting up Cobalt Raq3 with 2 NIC cards as fierwall.
> > Now I want to use it to put a thierd card in order to setup the
> > so-called: collapsed DMZ, such as:
> >
> > [internet]---[Routeur]---[Firewall]---[LAN]
> >                              |
> >                            [DMZ]
>
> It is in general not the best idea to put all your eggs in one basket.
> Plus, the RaQ3 is your web/mail/ftp server, right?

No on this Raq3 I don't have Web, Mail, FTP, ... it serves only as
firewall. No things else.
So, I want to exploit at the top.


> What the heck are you
> going to put in the DMZ? Other than databases, which you might put on
> your RaQ as well, there's not much else.
>

In the DMZ, I will put many applications for public, and services like
SMTP, FTP, DNS, ....
It is damage if I can not profite from this Raq3 to add a third NIC card to
sperate DMZ, LAN, Internet.

>
> Can you afford $1,000 for another box? I'd build myself a nice PC with
> three NIC's, install a standard Linux distro on it, and learn how to
> make it a firewall with DMZ. Then I'd run *only* that service on it,
> which is the best way to get maximum security.
>

Yes it true, particularly this allows me to use iptables, ipfilter...., but
again damage that I can not
use this RAQ "au Maximum".


>
> --
> Rodolfo J. Paiz
> rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>
> Nueva Dirección: rodolfo@xxxxxxxx <mailto:rodolfo@xxxxxxxx>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users