Re: Recommended minimum security for making a PC accessible over the Internet...?

[Adrian Merwood <adrian@xxxxxxxxxxxxxxxxxx>]

My philosophy on this is pretty simple - the only reason you have a
firewall is to knock holes in it.  Just make real sure you know exactly
what the holes are and why they are there.

My Intertex ix66 DSL router gives me a DMZ to play with I have a couple
of public servers running there on public IP's.  For convenience I
started out with these pretty open in order to get things working and I
am progressively shutting things down in line with the traffic that I am
seeing in the firewall logs.....I consider these servers to be
sacrificial - if they die I can easily rebuild them.  DMZ servers cannot
access my internal LAN only the other way around.

I regularly scan the logs looking for traffic that I dont expect to
these addresses......so far so good.

Ian's comment is best though the only real security is to unplug the
network cable.....after all thats the only way NT ever got security
certification from DOD in the US.

Adrian