On Du, 13 feb 11, 11:35:12, Tixy wrote: > I couldn't see any practical reason for a second Ethernet interface > anyway. There's performance issues when input and output traffic share a > single interfaces, but as my ADSL speed is <2% of that of the servers > Gigabit Ethernet adaptor, that doesn't really factor in.
Correct me if I'm wrong, but this means you have two IPs on the same interface, one is public and one is RFC 1918 and all your internal computers are connected directly to the big bad internet (via the switch and the modem). I have serious doubts one can properly secure such an environment, unless all other computers have their own firewall (which treats the local lan the same as the internet), all local services are tunneled (VPN, SSH, ...) and possibly many other things I can't think of. There are so many ways such a setup can go wrong that I wouldn't want to try it unless I was forced, and would definitely not recommend it to newbies. Regards, Andrei -- Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
signature.asc
Description: Digital signature
