Stand alone server on a DMZ

[sbulos]

I know this is a silly question but here goes,

I am in need of allowing my remote users access to certain high priority files when traveling, while not allowing anyone or anything to initiate an out to in connection to my area network.
I am proposing placing a stand alone server (basically a PC), where shared files and calendars can be uploaded to.
the files will be situated on an encrytped partition (256 TwoFish), and access to this server (on the DMZ) will be through a VPN 5000 concentrator.

the Question IS

How advisable is this?, and how much time practically speaking would it take to hack into the data if at all.

 

[Eddiefdz]

I say you have a PPTP server on your DMZ and have your users connect to there. The PPTP could be configured to use 128bit encription. I too have a similar setup as you would need. I have people who are traveling all the time but need access to the file server. My linux firewall has PPTP built in so i could actually route the PPTP connections, then permit access to only certain IP addresses etc.



Eddie Fernandez
CCNA, Network+, A+, MCP