DMZ

[Luke Murphy]

Hi,
I need to brush up on my knowledge of DMZ's.

Anyone got any good articles, wiki's suggestions?

Cheers

[rana izzat]

please look at the pdf.
http://www.sans.org/reading_room/whitepapers/firewalls/designing-dmz_950

[Luke Murphy]

rana izzat wrote:please look at the pdf.
http://www.sans.org/reading_room/whitepapers/firewalls/designing-dmz_950

Good article. I suppose the main conclusion from a Java EE perspective is that you are best of having two firewalls. One in front of the DMZ and one behind.
Where the DMX is the Webserver.

What would you do if you had a web centric architecture with no database or any other machines. Just one webserver?

I suppose you would just one firewall. Is the webserver technically still in the DMZ?

Thanks

[Luke Murphy]

The wikipedia is also quite good
here.

One interesting question suppose you want to also create a DMZ and put a proxy server there for all employees to use for internet access.
Could you use the same DMZ that you have already configured for your WebServer and incoming traffic?