We have some development servers which are used by outsourcing companies, from these development servers, they can ssh into production database servers, can you tell me how to isolate servers from accessing each other? Answer Change the login and password on production servers? Firewall them in your router, maybe? If SSH is your only concern, … Read more
In our VMWare infrastructure, I have a production network (10.1.1.0/24 subnet) and an isolated virtual lab network (also 10.1.1.0/24) which is created by Veeam, with the Veeam proxy appliance sitting between them. I created a NAS VM (FreeNAS 9.10) with two virtual NICs, and I wanted to connect one to the production network, and one … Read more
Closed. This question is off-topic. It is not currently accepting answers. Want to improve this question? Update the question so it’s on-topic for Server Fault. Closed 6 years ago. Improve this question I have recently acquired a poweredge running esxi 5.5, and am creating a network for pentesting purposes. Currently my main network and the … Read more
I ditched shorewall because it seemed overkill for the simple, unchanging ruleset this seems to call for. I have 2 bastion firewalls in the rack between the host & each ISP. The host contains an enclosure-bound VM which load-balances the 2 WAN connections and provides routing for multiple networks. Since it also hosts the bridges, … Read more
I am attempting to setup a test environment for a guest WiFi network. My aim is to use a separate SSID on a completely different subnet and keep it totally isolated from the management subnet. So far, I have a Cisco Aironet 1602 broadcasting two different SSID’s as follows: management-wifi – 192.168.0.x guest-wifi – 172.16.0.x … Read more
I’m setting up a proxy to let a totally isolated vlan (called VLAN1) to access to another vlan (VLAN2) via proxy. One server has two NICs : on for VLAN1 (10.1.1.50) and one for VLAN2 (10.1.2.254). On my VLAN1, I’ve several server running the SAME web application (for different users) : https: //10.1.1.101/myapp https: //10.1.1.102/myapp … Read more
I have been tasked to install Windows XP, IE, and Office 2007 on a computer that will become part of a standalone network not connected to the Internet. What is a good way to install all of the security updates? I’m installing from CD’s of Windows XP SP2 and MS Office 2007. Next I plan … Read more
I have a shared hosting account with justhost, what i need is to give an FTP access to a site operator, to his website. The website is a sub-folder under the www folder. I know how to limit his FTP access to the folder only, but i need a way to isolate the files that … Read more
I am looking to set up a small network for a client which would be isolated from his primary network. (I’m hoping to set-up the additional network as VMs on the primary network.) I’ve instructed the client to request a bunch of static ip addresses from his ISP, but I’m not sure how to proceed … Read more
Imagine you need several Virtual Machine onto your ESX server. The VMs are composed of two distinct group and those group can only communicate to each others over a physical firewall. Now, what make sense from an network isolation standpoint? Are all the Virtual Machines running in the same virtual ethernet engine and simply separated … Read more
