6.1 Adding an Inbound and Outbound Firewall
In this scenario, Company A is running TCP/IP and the Internetwork Packet Exchange™ (IPX™) protocol on the network. Company A wants to use Novell BorderManager as both an inbound and an outbound firewall. Company A wants to do the following:
-
Add a firewall to secure the network
-
Allow outbound and inbound Simple Mail Transfer Protocol (SMTP) e-mail
-
Allow outbound and inbound DNS information
-
Allow public users from the Internet to view only the Web server on the intranet
-
Allow internal users on the intranet to access the Internet
The following Novell BorderManager components are used to implement this scenario, as shown in Figure 6-1:
-
Packet filtering
-
Proxy Services Transparent HTTP proxy application
-
Access control
Figure 6-1 Inbound and Outbound Firewall
To implement Novell BorderManager as a firewall on the network, Company A must perform the following general sequence of steps:
-
Install Novell BorderManager and enable packet filtering on public interfaces during the installation.
For more information and for Novell BorderManager installation procedures, see Novell BorderManager 3.9 Installation Guide
-
Configure packet filtering.
-
Enable and configure the transparent proxy application on the Novell BorderManager server.
-
(Optional) Enable and configure the HTTP reverse, or acceleration, proxy to enhance performance.
-
(Optional) Enable and configure access control rules for the intranet users.
For more information on configuring proxy services and access rules, see Novell BorderManager 3.9 Administration Guide .