[ale] Web Server -> DB question

[Jennifer Taylor]

I feel the need to publicly note that Chatham County, Georgia, for all its failings, is most definitely not insane enough to attempt what this client is reqesting.  We have a dedicated, intelligent and very strong team of network folk who take time to plan out our infrastructure, believe it or not. :)
Thanks for all the suggestions so far.  Ya'll have been a big help.

Jenn

Jonathan - I apologize about the line wrap, but I don't have any choice in the mail client I use between 8 and 5.  Personally, I prefer pine. 

<<< Jonathan Rickman <jonathan at xcorps.net> 11/17  2:16p >>>

First off, the idea of using dual nics to have the webserver straddle the
two networks is terrible.

Second, you're right, they need a separate machine acting as a firewall.
I'd suggest placing both servers behind the FW and using port forwarding
to direct traffic from the FW to the webserver, or reverse proxy using
squid. <assumption> Depending on what organization you are representing
within Chatham County </assumption> GCAC or DOAS might be able to assist
you in procuring the equipment needed for such a setup.

Third, fix your line-wrap. Some of us hard core guys still use mutt and
pine.

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP 6.5.2

mQENAzm0QZQAAAEIAN3uNRQlWHMrHwKgTNzpYps6SLipfNvH 0uZi0TvxyXFHiiH
kivQYxlcPn/4Za4eyl5XZvP6lGQ3DXcCzT 9di75HqFtTiHeE9YScR0WEeBB1ywL
j8nKxFdGMCJ3a3khSafPvyTUQKGaEWQGnui 6UieWeBhDHdE/o21qNd0 6M49P73
0pVTdmdn1jPj1cU vrqkNWMfNNNhLyPjrdPzoL6SoYzCs6p5YhLWaNOiet/91RhK
VpC8uy2cUIWNOAyAOtDJwF4GY AIVP2WTLg6L/FByDH507HP4NvkbnwPAkDSTh7M
TlXvdoeNiaEUCYCgx8CFSCAg/pl819 gts810D8ABRG0JkpvbmF0aGFuIFJpY2tt
YW4gPGpvbmF0aGFuQHhjb3Jwcy5uZXQ iQEVAwUQObRBlNffoLbPNdA/AQETwwf/
d4W131UXeWd1 hcCR1bkFJRx 08fNtHzbMzjqquA4IRPftt72M6RzDsRn1xpsdh 
RqP0oeZ0IfnByhXQ7x65JxRUaYW2mw8GNQOeTkJ2uNDg3SaFG2HGYxASohP2r8D6
Yh1WIfEgf3YDwoKyGAfJTgcfHZe85 hgg6R60KbGMAhWf5Tbb6IEpzdvBi/HoYHC
c1km8esjnMPDmR1aLjcRffaMmWGwXk/33oZRo3Q0SO/MvqWyo1kZnq2JIxX0MDAm
nm2p0cZtQc1sECkC1XyyyH8tgWhXwzYpucpsQ3IhWFrCuL7y4t/wREOgd4KaSxkN
OKraa8g7Nyh4s8rSHFvq5A==
=XYFV
-----END PGP PUBLIC KEY BLOCK-----


--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.