Linux webserver/firewall...??

[DrMekon]

Got a home network, and cable modem...

Wanted to run a home webserver, and was wondering about security...

Ive read the most secure way would be to have a firewall connected to the modem (linux... e.g., smoothwall, astaro.. etc), with an additional 2 nics.. one for the internal lan, and one for a dmz to which I connect my webserver...

Seems like a lot of devices....

Could I simply not use a linux build webserver & firewall with 2 nics, one for external internal, and one for internal lan... or would I be exposing internal lan to potential security risks if webserver hacked...???

Any suggestions?

 

[DrMekon]

Thats what I thought to be honest....

For home use, why would you want a home webserver in a dmz, totally exposted to the itnernet, when you can hoave it behind your router and firewall...

I can simply just setup the webservers firewall so that it rejects/or drops any attempts to connect to internal lan devices, but allow the other way around