input on network design?

[birky]

I am going to try and set up a network. I know some about networking, but I
need some advice. I have a broadband connection with static IP's available
on a /29 subnet. I have a server with two NIC's availabe. I have a LAN with
about 30-40 clients connectected via Ethernet. I would like to hook up the
entire LAN to the broadband connection. I would also like to protect the
LAN and the server from hackers and viruses.

What would be the best way to set up such a network? I would like to run a
domain and host a web page off the server so I was thinking that I would
give the broadband router a public IP, the give a NIC in the server a public
IP and plug that NIC directly into the router. Then hook the other NIC in
the server up to the LAN. This would provide a point of access to provide
security for the network. If I did that, would I run DHCP, DNS and possibly
WINS off the server. I would also probably have to use NAT wouldn't I?

Am I thinking along the right track or are there better ways of
accomplishing this? I haven't ever set up a full network like this, but if
I could get some direction about which path to take, I would like to learn
how to do this.

Thanks for any input.

-rb

 

[bryce.yates]

There are a few ways to accomplish what you are looking to do. The
cost and complexity usually related directly to security. I would
suggest putting the server behind a firewall appliance and not a server
running NAT. This solution can be less that $200. Then if there are
Web services you can allow port 80 through the firewall to the web
server. This solution would be the most economical solution that would
provide fairly good security. Don't fall into the trap of thinking
that no one is going to hack you because you are a small fish. most
hackers now adays are looking for vulnerable systems to use as spamming
agents.

Good luck

feel free to contact me if you would like a further advice

Bryce Yates
(e-mail address removed)