SmoothHost is an add-on module for
SmoothWall Corporate Server. It extends the functionality of
Corporate Server to support multiple IP addresses on the Internet
(Red) interface. This is typically used where multiple Web servers
need to be protected by a Firewall, with each server having its
own unique IP address. Please note:
SmoothHost requires that you have an Ethernet NIC as your Red
interface, and that you are assigned static IP addresses from your
ISP - it will not operate with dynamically assigned IP addresses.
Having installed SmoothHost on a Corporate Server system, an
additional page is introduced into the Services page group of the
configuration procedure. The External Aliases page is shown at the
right. An IP address is simply typed into the Alias IP text box
and the Add button pressed, whereupon the IP address is added to
the Current Rules list. Many hundred IP addresses can be entered
into theCorporate Server configuration in this way. The next stage
of the configuration process is to use the External Services
Access page to limit where these IP addresses can accept traffic
from and on what IP port. This is a standard Corporate Server
feature, allowing only traffic from specific network addresses to
be accepted by SmoothWall. However the normal situation with
publicly accessible Web and Mail servers is for no network address
restrictions to be set.
Finally the traffic from these Real IP addresses on the Internet
interface needs to be forwarded to the private IP addresses of the
servers that will service the traffic. This is achieved using the
standard Port Forwarding configuration page, as shown at right. It
is normal practice to locate public facing servers in the
Demilitarized Zone (DMZ), so they are kept apart from the totally
private servers and user computers on the Local network. As can be
seen from the illustration, the Port Forwarding configuration
simply sets up a list of IP addresses configured on the Internet
interface by the Aliases page (above) and the IP Address and Port
where the traffic is to be forwarded to. In this example, the
network address of the DMZ is 192.168.1.0.
Download brochure of this
product
![download brochure for this product [acrobat pdf format]](pdf/adobe.gif)
Inquire
about this product