Koozali.org: home of the SME Server

Network Design Help

laurie_lewis

Network Design Help
« on: February 21, 2006, 12:56:34 AM »
A potential upcoming change in career has required me to ask for some help from you experienced network people.  I am looking at providing a variety services requiring a web presence.  I was previously using SME 6 (and was very happy with it) but had to move to ClarkConnect due to some software compatability problems with SME - Version 7 has still not resolved these but I would prefer my gateway to be based on SME.

I also want to create my servers based on mini-itx boards to reduce power consumption and noise as it will be based at home/office.  The network will have a maximum of 5 users internally but they will all want internet access, file access, access to music and video files over the network.

I think I will need to initially be hosting 4 web sites - which at the start will not be high volume (education based).

I was thinking that I could run SME as the gateway, utilising its webserver, mysql, php, mailserver, webmail and content filtering whilst maintaining clarkconnect as a PDC (file sharing only) and to run the other software that will not run on SME.  In this way between the two computers the loads should not get very high but they should be able to operate together.  

(I know someone is going to ask what the software is that will not work on SME is - it is Twonky's MediaServer.  I know others have been able to get it to work but it does not work for me on SME, while it works straight out of the box for other versions of linux I have tried it on - frustration levels have exceeded effort required)

Will this setup increase my security for my files as they are not on the same server?  Will 1 gig mini-itx boards be enough?

Any comments??

Laurie

Offline gordonr

  • *
  • 646
  • +0/-0
    • http://www.smeserver.com.au/
Re: Network Design Help
« Reply #1 on: February 21, 2006, 08:16:13 AM »
Quote from: "laurie_lewis"

Will this setup increase my security for my files as they are not on the same server?  Will 1 gig mini-itx boards be enough?

While the standard answer is that it will be more secure, that would depend on what information is being passed through the gateway to the internal box.

If you poke any holes through the gateway server to the internal server, you are as secure as the software running at the far end of the holes. It is a very common misconception that port forwarding through a firewall adds security to the forwarded services.

I suspect the 1gig CPUs will be just fine for five users.
............