Which services to allow through my firewall????

Question

Hi all,I'm just starting to configure a new proxy server, which will operatein our DMZ.I want to use NT/2000 authentication to grant users different accessrights to the web, pass through authentication using their windowslogin.On our internal firewall i've allowed HTTP Proxy and RDP through fromour side to DMZ. What other services do i need to allow in eitherdirection to allow the server to view the users in our 2000 and NTdomains?The proxy server is a member of the 2000 domain, and there are two waytrusts between the 2000 and NT domains.Thanks,Tim

Don Kelloway · Accepted Answer

Bearing in mind that it is never a good idea to allow connections to originate from the DMZ inbound to the LAN I think the PS should remain on the internal protected side and not reside in the DMZ. This way it will result with internal users to point to the PS which can accommodate the authentication, etc. In turn the PS will establish its necessary connections to the appropriate locations on the 'net and naturally nothing is to be allowed inbound through the firewall to the PS.

Tim.Richardson1 · Answer

I came to the same conclusion. The proxy that will handle all theauthentication is now behind the internal firewall this then relays toan upstream proxy in the DMZ.Tim.

Which services to allow through my firewall????

Join the Discussion

Didn't find your answer?