RE: Firewall setup for 24/7 server

["Ian Lowe" <ianlowe@xxxxxxxxxxxxxxxxx>]

I would say just trust the  Vigor, and open as few ports as possible.



Basically, the NAT translation gives quite a high degree of defense in and
of itself - there are not that many ways to get through a NAT router, and
the Vigor also has a (pretty basic) stateful inspection firewall built in.



I have been using a Vigor 2600VGI at the edge of my home network for years
now, and never had an issue.



I currently have an SBS2003 sitting behind it, with the usual ports open
(80,443,25) and the rest of my network behind the SBS (but that's really
only because SBS likes acting as the "edge" device itself..)



Ian.







From: ukha_d@xxxxxxx [mailto:ukha_d@xxxxxxx] On Behalf Of
Pankaj Dhokia
Sent: 14 January 2007 23:18
To: ukha_d@xxxxxxx
Subject: [ukha_d] Firewall setup for 24/7 server



I'm going to be setting up my fileserver/Geovision server soon.
Obviously it will be running 24/7. What is the best way to protect it
from outside intrusions?

I have a Vigor 2600. Would it be wise to use a Via 800 PC as a hardware
firewall with IPCop or something similar? ie.

ADSL line in > Vigor > Via PC (with firewall) > Switch to rest of
the
network

Ideally, I want to not have to install firewall software on all the PCs
I have on the LAN. I would also like to be able to access the Tivo from
outside.

in 3 easy steps.

Connect with others.

.


<http://geo.yahoo.com/serv?s=97359714/grpId=1109639/grpspId=1705041992/msgId
=139827/stime=1168816720/nc1=4025369/nc2=3848528/nc3=3>




[Non-text portions of this message have been removed]