Help with DMZ

[irmdogg]

Hi there,

I have been given the responsibility of setting up the DMZ here at work. Let's just say I don't know where to even start. This isn't normally my area ( I design websites ). Is there a place I can go, or someone here that can help?

I'm looking for a step by step walkthrough. Everything from installing Windows 2003 to Apache, MySQL, PHP.... web-based email (outlook), FTP services.... Everything a DMZ should have.

I know that this is a lot to ask, but I didn't know where else to post such a noobie question.

Thanks to anyone who takes the time.

irmdogg

[wobbley1]

Start with your network design. You need to look at a separate subnet for your DMZ segregated from everything else by a firewall. Ideally all servers in here will be members of workgroups and not members of your domain to reduce the amount of ports you need to open on the firewall as each one you do reduces the security the DMZ is designed to give you.

Installing windows - standard install really but look to set all unnecessary services to disabled to reduce the attack surface of the operating system.

For everything else have a search around the web for info. www.phoneboy.com used to be a good source of information of securing the o/s but i have not looked at it in a while.

hth and good luck,

[irmdogg]

Thanks for the notes. I'll be checking out that website link shortly.

irmdogg