Koozali.org: home of the SME Server

Firewall + Web Server

cosy

Firewall + Web Server
« on: May 02, 2004, 11:07:45 AM »
Hi All,

  I got statics IP address and i want to  run two SME 6.01.1 servers as a Firewall  and the web server. I think this way is more secure than running both in one box?. My other Questions are.

  1. Firewall sme server running with all the services. So how can i make that as a totally for firewall.

  2. I want to host multipel web sites on web server and groupware software on each virtual domain. is that possibel or how can i do it.

  3. I want to send web site statistics for each virtual domain how can i setup.

  4. Where  do i setup virus and spam filters? (Firewall or Web server)

  5. In the firewall SME Server configuration DNS server is a local ip address ( server local IP) Where can i put the external DNS address?

Offline Boris

  • *
  • 783
  • +0/-0
Re: Firewall + Web Server
« Reply #1 on: May 02, 2004, 10:56:49 PM »
Quote from: "cosy"
I think this way is more secure than running both in one box?

Not really. Services that needs to accessed localy only bound on internal NIC and not available from Internet anyway. Services that need to be public will be forwarded to other server too.
Quote
1. Firewall sme server running with all the services. So how can i make that as a totally for firewall.

Use firewall-only distro like IpCop or m0n0wall or similar.
Quote
2. I want to host multipel web sites on web server and groupware software on each virtual domain. is that possibel or how can i do it.

easy done for the web server, but no so easy for groupware. If groupware you select uses its own users database, then no problem. If something like twiggi, that uses SME's accounts for e-mail, you may have headache with same users in the different domains. Read the forum on this subject and consider one of the solutions first.
Quote
3. I want to send web site statistics for each virtual domain how can i setup.

Can be done with awstats and some tweaking.
Quote
4. Where  do i setup virus and spam filters? (Firewall or Web server)

It depends on the firewall you choose. If it support e-mail proxy and filtering you can do it on firewall, if not, on the  internal mail server.
Quote
5. In the firewall SME Server configuration DNS server is a local ip address ( server local IP) Where can i put the external DNS address?

Consider using third party DNS service like zoneedit.com or similar.
...

Anonymous

Thanks
« Reply #2 on: May 03, 2004, 02:57:48 PM »
Hi

  Thank you so much for u'r detail reply. I think
i'll try ipcop or Monowall as a firewall.

Cosy