I think it was suggested it be left in the DMZ to prevent wardrivers
from (easily) getting at the systems behind your firewall.

John

> -----Original Message-----
> From: tclug-list-bounces at mn-linux.org 
> [mailto:tclug-list-bounces at mn-linux.org] On Behalf Of Mike Bresnahan
> Sent: Monday, December 29, 2003 2:20 PM
> To: 'TCLUG Mailing List'
> Subject: RE: [TCLUG] Wi-Fi security question
> 
> 
> I'm not sure why you would want to put the AP in the DMZ of 
> your firewall. Mine is behind the firewall.  To be perfectly 
> accurate, my AP and firewall are in the same unit (Linksys 
> firewall/AP/switch), but all wireless (and
> non-wireless) clients are behind the firewall.  This still 
> allows me to put one machine in the DMZ if needed (e.g. 
> playing some networked games).  Is this setup not possible 
> with stand-alone APs?
> 
> Mike
> 
> -----Original Message-----
> From: tclug-list-bounces at mn-linux.org 
> [mailto:tclug-list-bounces at mn-linux.org] On > Behalf Of The 
> Wandering Dru
> Sent: Monday, December 29, 2003 12:38 PM
> To: TCLUG Mailing List
> Subject: [TCLUG] Wi-Fi security question
> 
> 
> My mom is looking to go the wireless route in the near future 
> for her laptop.  I know a lot of you that use wireless put 
> the AP on the DMZ of your firewall.
> 
> My question is this, do you pinhole the firewall to allow 
> certain services(ie, filesharing, printing, etc.) back into 
> the LAN or do you just limit the AP to internet access?  Or 
> is there some other fancy way to allow these services that 
> I'm not aware of?  I'm mostly just looking for a 
> security/convenience trade-off comparison.
> 
> I have nearly no expereince with wireless and would like to 
> come up with a plan/cost before I go buying stuff willy-nilly 
> on my mom's bill.
> 
> --
> The Wandering Dru <dru at druswanderings.net> 
> http://druswanderings.net <--- Things 'n' Such
> 
> Get nifty 
> TCLUG merchandise at the TCLUG Store! http://www.cafeshops.com/tclug
> 
> 
> 
> _______________________________________________
> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota 
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list


_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
http://www.mn-linux.org tclug-list at mn-linux.org
https://mailman.real-time.com/mailman/listinfo/tclug-list