Network Connections
38
Dialin access
Select
Dialin Access
to use this port as a dialin server to allow remote users to connect
to your local network. Refer to the chapter entitled
Dialin Setup
for details on configuring
the SnapGear appliance and remote client.
DMZ
The
DMZ
port on your SnapGear appliance can be configured as a second LAN
connection, a DMZ connection, a secondary Internet connection, or as a secondary
failover Internet connection that will be activated should your primary Internet connection
go down.
The configuration you select affects the default behaviour of the firewall for the DMZ port
(see
Packet Filtering
in the chapter entitled
Firewall
).
Direct DMZ
Select
Direct DMZ
if you wish to establish a physically separate DMZ network. A DMZ is
used to provide better security for your LAN. If you place a publicly accessible server on
your LAN, and an attacker compromises the server, then the attacker will immediately
have direct access to your LAN. However, if you place the server on a physically
separate network (i.e. the DMZ), and an attacker compromises the server, then the
attacker will only be able to access other machines on the DMZ. The SnapGear
appliance will protect machines on the LAN from the compromised server on the DMZ.
Bridged DMZ
See the
Bridged Internet
section earlier in this chapter.
Services on the DMZ Network
Once you have configured the DMZ connection, you will also want to configure the
SnapGear appliance to allow access to services on the DMZ. There are two methods of
allowing access.
If the servers on the DMZ have public IP addresses, you need to add packet filtering
rules to allow access to the services. See the section called
Packet Filtering
in the
chapter entitled
Firewall
.
