Koozali.org: home of the SME Server

Gateway + Server, or Server Only Setup.

Scott

Gateway + Server, or Server Only Setup.
« on: March 16, 2003, 04:45:02 AM »
Hi Everyone

I'm wanting to run an SME server at home (for email, webserver and maybe file server) but i'm not too sure which option to choose.

I have an external ADSL router (asus EV6000) which provides a dedicated connection.  If I do an external portscan of this, all ports are closed.  Is this enough of a firewall to use a server only setup? The modem is connected directly to the network so I dont really want to rely on the server being up for general internet use.

I have fowarded port 80 from the router to this machine and port 80 now shows up on the port scan and the website can be viewed.

So is a server only setup sufficient?

Also which ports will I have to point at the server to receive incoming mail? (80, 110, 25, 443 ?)

any help is much appreciated

Scott

Jason Benedict

Re: Gateway + Server, or Server Only Setup.
« Reply #1 on: March 16, 2003, 10:02:02 AM »
Hmm....

looking at your wants...maybe server mode will do, but i'm not in anyway good to give suggestion, however, u may refer to teh documentation.

Jens Kruuse

Re: Gateway + Server, or Server Only Setup.
« Reply #2 on: March 16, 2003, 10:12:17 PM »
These are the ports I have open on my router :
[25] SMTP Mail Server
[80] HTTP Web Server
[443] SSL Web Server

You should never run a server visible from the internet in "Server mode". Use "Server and Gateway" - you can switch mode just by selecting it in the server console under "2. Configure this server". There is more to a firewall than simply blocking various ports.

Cheers,
Jens

Joseph

Re: Gateway + Server, or Server Only Setup.
« Reply #3 on: March 22, 2003, 10:58:49 PM »
A quick follow up:

I have almost the same setup as you do.  In your instance, since you have a router already setup doing NAT/Port blocking/fowarding, you can choose the "server only" option since your machine will not be using a public IP (right?). One good thing I found with this situation is that if your SME server is behind a router, you can turn on the Telnet access.  It is advised that you don't turn Telnet on if you are planning on using public IP's on your network.  One other cavet is that you should set your email access to private only.

Joseph