Linux server, router, and cable modem 3

[jh0]

Hello,

I am installing a Linux-based web server which will be connected directly to a Toshiba cable modem (with a static IP address). I also need to connect a Siemens router, which provides connectivity to three other desktop machines.

I'd like to connect the server directly to the cable modem, and connect the router to the server. Is this a feasible solution, or would it be more practical to connect the desktop machines directly to the server via additional NIC cards? I already have a total of three NIC devices in the server.

Any advice, information, or suggestions would be greatly appreciated. Thank you!

 

[jh0]

Also, I forgot to mention that the router will need to remain operational in some form because it provides Powerline service to several machines.

 

[thedaver]

You are trying to create a DMZ (de-militarized zone) for your web server and a protected private lan for your workstations. This is very common in router design.

Most often the implementation relies upon smart routing decisions in the router such that the router is responsible for determining whether packet flow should move to the DMZ or to the private lan.



Hosting Solutions for Home or Business.

http://www.surfinbox.com/hosting/

 

[franklin97355]

The more common configuration is to connect the server to the router and the router to the modem then use the router to set up the DMZ for the direct access to the web server.

 

[marsd]

In your current plan, the linux webserver also must route traffic. This is not a good design IMHO. Public services
on a router, of any platform, and especially web services,
are a security faux pas.

My advice is cable modem->router->network hosts,
with the linux webserver being just a nat
forwarded internal or port redirected internal
host in the network.

HTH

 

[jh0]

Thank you to everybody for your help. My router didn't seem to support DMZ, but I was able to roll it back to an older firmware which does, so that appears to have solved all of my problems. I'm running a strict firewall (and Tripwire, etc.) on the server, so I should be okay as far as security is concerned. Thanks again.