That depends on whether you're more concerned with: 1. the web server - keeping safe and secure is best served with web publishing a private-side host 2. the private LAN - keeping it safe is best served by DMZ hosting the web server. HTH, Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the book! ----- Original Message ----- From: "Brian Harris" <bharris@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, December 27, 2001 20:14 Subject: [isalist] DHCP and web server in a DMZ or should we publish from the private network http://www.ISAserver.org Hi, I have a topic that I need some advice on. I have a site (park) that is open to the general public and they will be able to roam around the site using wireless technology to log on to the proposed DMZ and will be issued with an IP via DHCP and then as they move from one area to another they will have different information available from a web server in the DMZ. The wireless side is fine but I'm struggling on whether I need to set the web server up in a DMZ or publish it from the private network. My security experience is smacking me in the face and saying no to the private side publishing....!!! As users will have valid private IP address. Has anyone done any work on this area? Thanks in advance and this site is great!!! Regards Brian Harris ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')