So I have my improved network environment now I have gone for a TP-Link router as my internal Router, and so far I have been very impressed with this bit of kit, this router is my main firewall between my internal network and my DMZ and also have excellent wireless capabilities because one of my Wireless card is quite old I have decided to use WEP to secure my Wireless network and it works like a dream. Then I have my old D-link router with NAT switch off but rule based firewall enabled to protect my DMZ and to make the actual connection to the Internet, I have two Servers in my DMZ and a further two servers on my internal network only. This gives me two SMTP server using one as a backup using the MX records and two HTTP servers, one running Windows 2003 and the other running Centos Linux. Security seems pretty tight in this arrangement. basically I have 2 firewalls between my clients and the Internet and each server in the DMZ has its one firewall enabled so there is two between each server in the DMZ and the Internet. but is this enough, well I am planning a routine of testing this environment from the outside as well as monitoring all the ports.
Syshelpman seems to be taking up a lot of my time hence not blogging much of late, I will try to get better, Today's Recommendation thou is one a lot of Linux hacks will know about, Webmin, what a great tool as much as I love the command line and I use it a great deal both in windows and Linux sometimes its nice to have a well laid out admin interface and that's the best way to describe Webmin, when Webmin first came out it was limited to say the least but now days with all the modules written for it its become a one stop shop for all admin needs, if you manage Linux servers take a look at it .
No comments:
Post a Comment