Collaborate Disseminate
My goal is to integrate a public facing service with AD using LDAP.
While I vouch for federated approach to user authentication, the business dictates LDAP.
We run a DMZ subnet and I insist on not punching any(punching as few as possible) … Continue reading Perfect DMZ: LDAP auth to AD
Does it makes sense to create two separate docker hosts (VMs) for reverse-proxy and web application?
My first idea was to put the web-exposed application in my separated VLAN (DMZ) where only ports 80 and 443 are exposed to the internet th… Continue reading Reverse proxy server in DMZ with separate server for nginx (docker)
I need to implement a web application consisting of the components
FE (Nginx + React.js)
BE (Java SpringBoot)
DB (MySQL)
For simplicity we will assume that the DB runs in localhost on BE’s machine.
From an architectural point of view, I … Continue reading Is there a real gain in terms of security by not using a reverse proxy?
Currently, I have modem with built-in NAT and DMZ. I have 250Mb of webspace and unlimited emails supplied by my ISP on WAN. I want to move the webspace to my own PC on a LAN along with the emails so I can change ISP to a faster fibre. BUT … Continue reading Where is the safest place to put servers
I was surprised to see that the French cybersecurity agency tolerates an SMTP relay server in the DMZ (which collects emails received from the Internet) to reach the Email server in the LAN.
In my opinion, the relay SMTP server in the DMZ … Continue reading Why it is so widely tolerated to allow SMTP server in DMZ to initiate connection to the LAN
I need to implement a web app for a self-service change password use case for on-premise Active Directory users,
which is accessible over the internet.
The service must allow the users to set a new password, so I need to send the new passw… Continue reading Web app architecture- set a new password for a on-premises AD setup
Where is the safest place to add a VPN based on this diagram?
Do you add it between the inner and outer firewall outside the dmz server? Or should I incorporate it within the organizations server?
I have various servers on-premises on a private network. Some of these servers need to reach out to vendor websites to check for patch status, license verification etc.
Where should these servers be placed? Tn DMZ or can they remain on the… Continue reading Server placement for vendor verification check over the internet. DMZ or Private?
I have setup a VM on our internal network and it is assigned an internal IP address. The VM requires connectivity to a couple of internet sites mainly Microsoft and ports are generally 80 and 443. This is to run Power Automate.
All connec… Continue reading Do i place this service in the DMZ or datacentre(internal)?
I am seeing Outbound traffic from a DMZ host to a Tor exit node IP. It’s a TCP connection attempt but denied by the Firewall. But I do not understand what to comprehend from this traffic or where I should direct my investigation.
Deny TCP … Continue reading Outbound traffic from DMZ to Tor exit node IP [closed]