bridging with nat, looking for recommendations

* bridging with nat, looking for recommendations
@ 2010-03-05 17:37 Gary Smith
  0 siblings, 0 replies; only message in thread
From: Gary Smith @ 2010-03-05 17:37 UTC (permalink / raw)
  To: 'netfilter@vger.kernel.org'

We have been using a NAT firewall for some time.  We have used bridges in the past but when I changed ISP's some time ago, we received a limited number of IP's.  We have fixed that problem and now that we have more IP's we have moved almost all external facing servers over to the bridged firewall.  Everything works smooth there.

The problem is that we have this annoying little problem with the SBS server.  I really don't want to put the SBS server into the DMZ if I don't have to (as it's also our main file repository for our business).  But we still need to access it via http over RPC (so ports 80 and 443) remotely.  

My options as I see it are:

1) NAT it on the firewall, but I recalled that we had some problems NAT'ing with a bridge some years ago.  

2) Put it in the DMZ

3) setup some type of proxy service (like ipvsadmin or something).

Without starting a flame war, what's the recommended path for something like this?

^ permalink raw reply	[flat|nested] only message in thread