Server in a network>router>switch> WAN security? 1

[audiopimp]

Ok, Hi! So Ive got my LAN and partial WAN connected via my router and switch. all is working as I would like it to. I do have a Server setup in 6the network running WinNT SP6a. Although this is an integral part of my network, under no circumstances would I want it to reach the WAN. All stations are set to allow DHCP as is my Lynksys router. Justr in case Im not so clear, I wouildn't want anyone to hack into my network and touch that server. What is needed for it to remain Ultra safe in that respect? Should I change its nic to use static IP then do something with the routers settings? should i install some type of software firewall? Please I need some guidance on this one.
Thank you

 

[toohip]

If I understand correctly your networked through a router conneted to a lan and you are concerned about the security of yor computers connected to the router? I am not a pro but from what I know your router has it's owm IP and irf anyone one were to querry you visible IP then they would be looking at the router and thats it! I am in research on this topic and don't know for certain. Still it seems from the router on in to your side is isolated from the router to the lan and internet. stay in touch

 

[audiopimp]

Yes you understood me correctly, and I'm pretty sure that what your saying is correct. The router does have a NAT firewall, and I'll quote.."NAT allows an IP-based network to manage its public (Internet) addresses separately from its private (intranet) addresses".
This being said Im sure there's a way for experienced (meaning they have nothing better to do) hacker can get my routers IP and then play with the other nodes attached to it...( see what i mean or does anyone think that's being too paranoid?

Thanks Steve

 

[pansophic]

That is definitely NOT being too paranoid. An experienced attacker will probably easily defeat your router's security. Check on any upgrades/patches for your router.

I run a separate firewall between my router and internal network, even at my home. You can get a free linux firewall, so all you need is a computer with 2 or more interfaces (NICs) to protect your network. I have used Astaro (

http://www.astaro.com)

and smoothwall (

http://www.smoothwall.org).

Both are easy to install and operate.

Even if you buy them, they are cheap, and will run on a piece of junk system that you have floating around, unless you are really fired up about the VPN capability. That can consume a significant amount of memory.

pansophic