Security Opinions

[MattWray]

I would like some opinions on the security of my setup, if I implement it. Currently I have a DSL running thru a NAT router, to a Server running VPN and NAT, to the network. I am thinking of implemeting a Linux web server in the DMZ, between the first router and the VPN/NAT Server. I am using port forwarding on the first router for all incoming traffic. I am having difficulties with the local firewall configs on the Linux box right now. What are the possibilities, in your professional opinions, of the web server being hacked, and if so how safe would the rest of the network be? And thoughts of putting another hardware router between the first router and the NAT/VPN box.
Thanks for any input! Matt Wray
CCNA, MCP

 

[MattWray]

Anybody? Matt Wray
CCNA, MCP

 

[Anupnellip]

hi matt ,
it all depends on what protocol/port u allow through your router . Though the rest of the network is relatively safer , but the web server can be hacked as it is directly visible from the internet . try to use a firewall between your internet router and the rest fo the network and allow only specific ports for communication .

Regards
Anup