Re: What is more secure?

>if he [a cracker] succeed he will gain all access to both networks:
>
>
Tomas,

I assume from this statement that you are using one triple homed
firewall? If so, I'd suggest using two dual homed firewalls which are
running different OSes with all publicly routable IPs.assigned to the
outer firewall. That way if the outer firewall is broken, the attacker
will only have access to the DMZ (assuming the internal firewall is
configured such that the same attack won't work on both).

My 2 cents,
-Chris
Received on Mar 01 2005