
Specifying DMZ Addresses 59
Specifying the DNS
Settings
In the Other Settings section, specify the DNS Servers.UptothreeDNS
servers can be specified, although not all have to be used. The Firewall
uses these servers to look up the addresses of machines used to
download the Web Site Filter and for the built-in DNS Lookup tool.
Type the required values and click Update to save the changes. It is
necessary to restart the Firewall for these changes to take effect.
Specifying DMZ
Addresses
The Firewall provides security by preventing Internet users from accessing
machines inside the LAN. This security, however, also prevents users from
reaching servers intended for public access, such as a Web or e-mail
server, which are crucial for effective Internet use.
In order to allow such services, the Firewall comes with a special
Demilitarized Zone (DMZ) port which you use for setting up public
servers. The DMZ is located between the local network and the Internet.
Servers on the DMZ are publicly accessible, but they are protected from
attacks such as SYN Flooding and Ping of Death. Use of the DMZ port is
optional and you do not have to connect it.
3Com recommends that you use the DMZ port as an alternative to Public
LAN Servers or to putting these servers on the WAN port where they are
not protected and not accessible by users on the LAN unless intranet
features are enabled.
DUA1611-0AAA02.book Page 59 Thursday, August 2, 2001 4:01 PM
Comentarios a estos manuales