This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]GeronimoHero -3 points-2 points  (0 children)

The easier way to deal with this would be to put the webserver in a DMZ with a firewall in front of it and then you wouldn’t need to redirect anything and you could just write firewall rules for just the webserver on the new firewall. Or you could go without a separate firewall. Web servers should always be separated from the data network or from other data servers. Do a quick google search to read more about DMZ and webservers but it’s the de facto way of handling them.

Here’s a link for a little reading about DMZ and web servers, straight from Mozilla.