Re: Web server and DMZ
- From: Joe <joe@xxxxxxxxxxxxxx>
- Date: Thu, 29 Jun 2006 18:09:20 +0100
Albert Bricker wrote:
OK that solves that problem!
Here is the part I can't visualize: If I have domain xyz.org. How can I set things up so that I can have web requests go to an external IP and yet have eMail come to the SBS server. Will SBS server allow me to use sbs.xyz.org for the remote web space and xyz.org for the eMail?
The simplest way to do what you want, and best practice anyway, is to
use a firewall/router box to face the Internet. The connection between
the router and SBS external NIC forms a separate subnet from the SBS
LAN, and is suitable as a DMZ. Plug the web server into another port on
the router.
Configure the router to forward port 80 to the webserver, 25 to SBS
along with whatever other ports you want SBS to answer. Have your ISP
put whatever web server name you want into his DNS, also pointing to
your external IP.
The only snag, as Russ says, is if you need https access to both the
web server and SBS. The only clean way to do this is to get more than
one IP address from your ISP, along with a firewall/router which can
handle and NAT two or more public IP addresses. Then you would also
need your ISP's DNS to point the web and mail server entries to the
different IP addresses. Outside hosting becomes much more attractive
at this point. Again, DNS is the key, and will point to your public
IP address for mail and the external host for web.
.
- Follow-Ups:
- Re: Web server and DMZ
- From: Dean Collins
- Re: Web server and DMZ
- References:
- Re: Web server and DMZ
- From: SuperGumby [SBS MVP]
- Re: Web server and DMZ
- Prev by Date: Re: Clean SBS2003 install
- Next by Date: Re: Web server and DMZ
- Previous by thread: Re: Web server and DMZ
- Next by thread: Re: Web server and DMZ
- Index(es):
Relevant Pages
|