Re: Security question

["Roger Grosswiler" <roger gwch net>]

> Hi!
>
> I want to hear your opinion on the following net configurations:
> 1. cablemodem -> router -> server in DMZ
> 				-> LAN users
> 2. cablemodem -> router/server -> LAN users
>
> Which one is more secure and what are the risks on each one?
>
> Regards,
> Sasa--
Sasa,

a) What kind of server are we talking of?

b) assuming it's a web- /mailserver, i would prefer version 1.
Is this a SOHO-installation with a small SOHO-Router? Be careful, as many of them indicate a DMZ in the meaning, that
they just forward all incoming ports to a local machine (except the request from your lan of course), but the server
often has just his own local protection, as they often exclude firewalling for DMZ-Computers

c) i would never use a web- or mailserver as additional router to surf. Advantage here: you would have the chance to
install squid on it.

Roger