New start - advice needed

Getting Started with IPFire
1

Morning all,

Been using IPFire for a looooong time and have been very happy with it, but the time has come for an upgrade. Primarily the hardware is old and my network has grown into a horrible mess so I think i’m going to do it right this time.

I’m planning on bringing email, nextcloud and web services in house and I have a range of 5 fixed ip’s that I know i can set up with aliases and rules.

So the question is, what is the best practice for the positioning of these servers - in the DMZ, in the Green network or Set up a secondary IPfire box and put external services behind that thus keeping it completely seperated from the internal network ?

Your advice and comments are greatfully received.

uncle_numpty

2

Hello,

and welcome back.

The best and easiest way is to put those servers into the ORANGE network and keep your devices in GREEN. There is no need for a second firewall.

3

Thanks for the speedy reply Michael.

That being the case can i use a 4 port nic for the ORANGE network and pass traffic to individual ports based on ip ? or do i have to use and individual NIC and a switch ?

Regards

4

You can bridge multiple interfaces together and make a switch out of them in the firewall. However, if you have really high bandwidth a proper switch would be the better way forward.