D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: skogmannen on July 13, 2010, 07:04:34 AM

Title: [SOLVED]DFL-210: Webserver on DMZ -> ODBC connection to server on LAN?
Post by: skogmannen on July 13, 2010, 07:04:34 AM

Hi folks  :)

Is it possible to have my webserver which is in the DMZ connect via ODBC to a SQL-server on my LAN?

If so, could you give me a quick guide; Which IPs to use etc...?


Thanks, Skogmannen

Title: Re: DFL-210: Webserver on DMZ -> ODBC connection to server on LAN?
Post by: Fatman on July 13, 2010, 08:20:59 AM

All you need is an allow rule between DMZ/Webserver and LAN/SQLServer.

Title: Re: DFL-210: Webserver on DMZ -> ODBC connection to server on LAN?
Post by: skogmannen on July 14, 2010, 04:05:19 AM

All I needed was an allow rule between DMZ/Webserver and LAN/SQLServer.  :)


Thank you very much, Fatman!

Title: Re: [SOLVED]DFL-210: Webserver on DMZ -> ODBC connection to server on LAN?
Post by: skogmannen on July 14, 2010, 04:09:11 AM

BTW, with regards to security, is allowing access from a web server in the DMZ to a server on the LAN considered a "no-no"?


Skogmannen

Title: Re: [SOLVED]DFL-210: Webserver on DMZ -> ODBC connection to server on LAN?
Post by: Fatman on July 14, 2010, 08:37:38 AM

Well I assume there is a reason you put an interface between the servers...

The below applies to all fire-walled traffic.

Be very mindful of what traffic is allowed, and even that should be limited as much as possible to keep your window of opportunity as small as possible.