Securing a Web server outside a firewall (bastian host?)?

[benitos]

I need to put a web server outside our LAN. What is a Bastian Host?? And, what security measures do I need to take to secure that server. Is there a tool or a "checklist" of how to secure it??

Thanks!!

 

[SteveTheGeek]

If your webserver is Microsoft, they've now got a variety of checklists and lockdown tools available on their website.

A bastion host is a machine that is outside all firewalls, fully exposed to attack from the internet. Thus, you want the bastion host to be locked down as tightly as can be, and ideally have no critical data/accounts on it.

http://www.sans.org/newlook/resources/IDFAQ/bastion.htm

has more details.