How Do I Setup a DMZ?

[PeterGriffin]

I wanna set up a DMZ for my web/ftp server and can't remember the proper configuration. I believe this is the system used to make it so you can leave a server open to the net without exposing your entire network. Also, I briefly read something the other day about setting up a honeypot to fool the hackers into hacking the wrong server. Anyone know anything about that too?

[GroundZero3]

depends on how you have your network. do you have a hardware router or software router? do you have any other firewall programs running?

[Siliconjunkie]

A TRUE DMZ (not the thing that Linksys routers have) requires 2 firewalls.

internet---->firewall---->DMZ host---->firewall---->internal network

It cant draw it, but the DMZ host has 2 nics (one on each network) and there is no route from the internet to the internal network. All access is done via a proxy in the DMZ.

This is very secure once you setup all the rules on both firewalls, but not very practical.

Now, what I think you want is how to make a host DMZ in your router. Basically just find the place in the configurator webpage thing and put the IP of the host you want to be DMZ.

[PeterGriffin]

You were right the first time Siliconjunkie, that is how I want it set up.

I have a linksys BEFSX41 firewall and a BEFSR41 router and some hubs. Do I set up the firewall to DMZ to the "dmz server"? Now how do I set up that server with the second nic?