Hello
I'm practising building networks and looking for some advice about secure hardware/network setup - just doing this at home at the moment as a test - so a simple system will do.
I am setting up an intranet on a Linux box running Apache. The intranet pages will be served to PCs in a LAN. The PCs in the LAN are also connected to the Internet.
The Linux box itself will not be connected to the Internet, protecting it from external attacks; but how do I configure the network to protect this server from attacks from within the LAN? It's not the server software and web application configuration I'm after, rather the network and network hardware side of it.
I am envisaging putting the server on a separate subnet from the rest of the LAN, and putting a router between the two as a firewall. Will this work?
Cheers
I'm practising building networks and looking for some advice about secure hardware/network setup - just doing this at home at the moment as a test - so a simple system will do.
I am setting up an intranet on a Linux box running Apache. The intranet pages will be served to PCs in a LAN. The PCs in the LAN are also connected to the Internet.
The Linux box itself will not be connected to the Internet, protecting it from external attacks; but how do I configure the network to protect this server from attacks from within the LAN? It's not the server software and web application configuration I'm after, rather the network and network hardware side of it.
I am envisaging putting the server on a separate subnet from the rest of the LAN, and putting a router between the two as a firewall. Will this work?
Cheers