Well, I think that would be fine to do – after all, MS do that by offering those two capabilities on the same box, namely, Small Business Server.
All I would caution against is having too much capability in the DMZ – i.e. keep this box doing only those roles two with minimum other functionality. Keep it secure – run the best practices analyzer and the security baseline analyzer to help you out.
Yes, Silver23, you are right. In fact, he can keep the server on the LAN and not put it in the DMZ at all – just forward (or open) ports 80 and 443 for web traffic and if you have an MX record pointing to your public IP address open port 25 for SMTP incoming email as well.
Viewing 4 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic.