DMZ Question

[jurgen]

I need to setup a DMZ zone because we've 2 servers that need to be accessed from the world and our own LAN. But no one form the world may access our LAN

Is it possible to have 1 AD controller in our LAN that controls the users on the DMZ servers, or do i need to setup de user as local users on the DMZ servers.

Do we've have to make a seperate domain for the DMZ servers ?

Can anyone help me to setup an DMZ with Windows 20003 Servers.

Regards Jurgen

 

[Jpoandl]

Typically, to further protect your internal LAN from the Internet, people install DMZ server in workgroups. You can create a special domain in the DMZ if you need multiple servers to act with the same security user names and passwords. However, having the DMZ servers acting as stand alone servers is OK in most cases. Many people put web servers in DMZ's for public access. Therefore, these servers don't need to be in a domain.

The function of these servers in the DMZ will dictate whether a domain is needed.

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[jurgen]

so if i go this way it means that i've to define local users if some persons need's access to an ftp server.

How about dns if i want to have

http://www.website.com,

we're do i define this ?

 

[Jpoandl]

Yes, for an FTP server you are safer to install this as a stand alone server (no domain).

To defin

http://www.website.com,

you will have to register the domain name website.com with Internic on the web. You can contact your ISP provider and they can do this for you. Or you can go to a generic domain registration company on the internet like JDHOST.com to register your domain name.

You will have to call you ISP to register

http://WWW to

a public IP address to have this point to the web server of your company.

CAll the ISP and ask them to register an A record for you. Something like this:

A RECORD for DNS:

http://WWW =

65.43.21.34

(Where

http://WWW is

the public IP address of you web server.)

-hope this helps...



Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[jurgen]

Sorry it was a little bit mal formed.

I've registered the domain and everything works, but my question is i've different servers that have to be accessed, one is

http://www.companyweb.com

and the other is

http://www2.company.com

both have to be accessible and i've only one public address

JJ

 

[Jpoandl]

Oh...because you only have one public IP address and I'm guessing TWO servers, you will have to create Firewall RULES to point traffic the right way.

For example, if one server is a WEB server and the other server is an FTP server you can create these rules on your firewall:

Allow port 80 to "Webserver IP"
Allow port 21 to "FTP server"

When someone from the internet types

http://www.companyweb.com,

they will be redirected to the Webserver (This uses port 80)

When someone from the internet types FTP:\\

http://www.comapnyweb.com,

they will be redirected to the FTP server. (This uses port 21)

So the same public IP address and DNS A record can be used to point to two different servers.

Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[jurgen]

OK, i'm going to give it a try

 

[jurgen]

An extra question, i've configured IIS. A person on the forum of IIS told me, that it is best not to use the default site, but to create seperate sites in IIS.

So I did this and it works. My question is :

My server 192.168.0.201\companysite is my location of the web, do I need to adjust the firewall to point to this or use host headers in IIS to redirect.

Jurgen

 

[Jpoandl]

I think the host headers will redirect for you. You just need to make sure that the firewall redirects to your IIS servers (on port 80).



Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)