With the Linksys router, if you define an private ip in the DMZ zone instead of using port forwarding - what risks exist

[PeeluckyDuckee]

Putting a computer's IP address into the Linksys router's DMZ, does that mean all the ports of the computer will be exposed?
What if the there are not enough port forwarding listings in the router than I actually need?

Basically if I run a web site, an ftp, and my own exchange mail server, what ports should I have open? I only want the open what's absolutely necessary, nothing more. I'm also my own dns name server for the website domain that I own.

My guess is port 20 and 21 for FTP, port 80 and 443 for web, smtp and pop3 for exchange mail? And dns?


I have a basic lan at home running 2K Server DC, and a couple of other 2K workstations. Got another spare computer that I want to use to install ISAServer2K and try to help secure the network better. My question is what is the best way to go about setting this up? Should I put the DC and the workstations in another subnet, separating it and the ISA server by a switch. So that way any data or requests that passes from the cable/dsl router must hit the ISA server firewall first before it can reach the internal network.

I want to use a 172 for the subnet behind the ISA server, and the usual 192 subnet connecting to the cable/dsl router. Where do I place my DNS server? Behind the ISA firewall, or infront of it?

I have the usual servicepacks and patches installed.

I apologize if my grammar and thoughts are not totally understandable/correct.

 

[stonecold3169]

DMZ does open all of your ports and is for use in your exact case, where you need more then the 20 or so ports open.

Some linksys routers DMZ doesn't actually work for beans, so good luck!