FW: Firewalls

["George Perolli" <george () gaptech qc ca>]

I have never heard of this mailing list before, but could use some
advise.... See below

-----Original Message-----
From: Carl Friedberg [mailto:friedberg () exs esb com]
Sent: Wednesday, January 06, 1999 12:29
To: 'George Perolli'; WINNT-L () PEACH EASE LSOFT COM
Subject: RE: Firewalls


Try sending this to firewall-wizards () nfr net

-----Original Message-----
From: George Perolli [mailto:george () GAPTECH QC CA]
Sent: Tuesday, January 05, 1999 6:59 PM
To: WINNT-L () PEACH EASE LSOFT COM
Subject: Firewalls


I was asked to give the setup for the firewal that I am going to be
installing.

        Internet Side                           Protected Side
        - Linux Box for DNS &                   - Main SQL Server
           unsercure WWW                                - Another server
that does FTP
        - Linux Box for Email                      downloads every 10
minutes
        - NT 4.0 Box for SSL WWW                - Approx 10 users needing
Net Access
        - Win95 Box with a USR Sportster
           128k ISDN card acting as a router

Sitting in the middle of this will be a NT box running the firewall.

Before anyone say that it would be better to have a dedicated router then a
Win95 box routing, I realize that.  However we own the card and we are going
to use it.  We are using a Win95 box because there is nothing on the
"router" that I need to protect with NT.

The SSL WWW server will need to be able to access the SQL server behind the
firewall and the server that is doing the FTP downloads will still have to
do the downloads.

Right now we are running WinProxy on a Win95 box and on the same box is the
application that is doing the FTPing.  The data that is being downloaded
does not have to be secure and therefore this computer can reside on either
side of the firewall

I am currently considering 2 firwall packages:
        - CyberGuard
        - Checkpoint Firewall 1

With this config what firewall software would you recommend.


George Perolli
Owner
G.A.P. TECH

--------------------------------------------------------------------------
The WINNT-L list is hosted on a Windows NT(TM) machine running L-Soft
international's LISTSERV(R) software.  For subscription/signoff info
and archives, see http://peach.ease.lsoft.com/archives/winnt-l.html .