Re: Question about dmz security

["David M. Fetter" <dfetter () setec-astronomy biz>]

That's definitely a security risk because that system essentially 
bypasses your firewall altogether.  You are right in your suggestion.

Jennifer Fountain wrote:
> I need an opinion on a current design implementation in place.  We have
> an ftp server sitting in our dmz.  This box has two nics - one is
> plugged into the dmz hub and one is plugged into our network.  I think
> this is a security risk and we should just allow internal users access
> to the box via the firewall by opening the port instead of having dual
> nics.  they do not see a security risk. maybe i am just too new at this
> and need some education.  what is the "best" way to implement this
> configuration? 
>
>
> Thank you
> Jenn Fountain


--
David M. Fetter (MegaSurge) - http://www.setec-astronomy.biz/

"The world is full of power and energy and a person can go far by just 
skimming off a tiny bit of it." Neal Stephenson - Snow Crash