Re: Question about dmz security

[mlh () zip com au]

On Sat, Feb 15, 2003 at 01:11:27PM -0500, Chuck Swiger wrote:
>  > what is the "best" way to implement this configuration?
>
> Your suggested approach is the '"best" way', for that configuration.
>
> However, better configurations may also be possible: in particular, if 
> your users can use scp (sftp, rsync, etc) to access the FTP server. 
> Authenticated access should be encrypted if possible.

Easier for the admin and the users would be to put squid
on the box, and have it proxy ftp.

After removing access to the internal lan of course,
moving it to properly within the dmz.

Matt