Re: Three homed DMZ
- From: "Fabrizio Bocci" <fabrizio@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 23 Aug 2001 16:57:38 -0000
If you use internal IP for the DMZ the DMZ concept is changed. Using privete
addresses make you have ISA server connected to 2 internal networks and you
need to use publishing rules to publish MAIL and WEB servers. So what's the
advantage??? you could publish those servers from your main internal
network.
Using a different public subnet on your DMZ make ISA filtering the incoming
and outgoing traffic and keep you internal network separated and not
visible.
----- Original Message -----
From: "Aleksander França Honma" <aleks@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, August 23, 2001 2:52 PM
Subject: [isalist] Three homed DMZ
> http://www.ISAserver.org
>
>
>
> I have already asked this once but it still isn't clear for me, sorry!
> Are there any benifits of using a public IP addresses on the DMZ? Or is it
a
> rule?
>
> Would it be wrong using the following way?
>
>
> Internal LAN ---- ISA FIREWALL/PROXY ---- INTERNET
> 192.168.1.0/24 | Public IPs
> |
> DMZ
> 192.168.0.0/24
>
>
> Thanks once again,
> Aleksander França Honma
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
fabrizio@xxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
