Another whacked plan

[elfs]

I own an IP address. This isn't unusual in and of itself. The bandwidth is pretty small, but it's tolerable; I have easily pumped a gigabyte a day through it without a problem, and my ISP is tolerant of people running servers on their system.

In my closet, as I speak, is Kouryou-chan's own computer. It's a dinky little thing, a P2/233 with 64MB of memory. So, here's the stupid thought of the day: Is there any reason I couldn't run, say, pendorwright.com out of my closet?

Here's what I'm thinking: I'll put a third NIC into the firewall box and configure a completely independent subnet for it, and route all outside traffic heading for port 80 to the subnet on that third NIC, the DMZ. Is there any reason this wouldn't work?

I'm a little itchy about publicizing my IP address, although it's not a state secret or anything like that. And my firewall's been pretty robust. I just worry about compromised traffic; I'd have to firewall off the rest of world from the DMZ box, and control access to the DMZ, and while I'm a pretty damned fine system administrator, there's only one of me and a whole bunch of black hats out there.

Comments

[wyrdone.livejournal.com]

Should work fine. Check out OpenBSD and PF if you haven't lately.

[technoshaman.livejournal.com]

Second that.... if you're paranoid about it, OpenBSD is one system the skript kiddies are almost guaranteed not to have a rootkit for... you already know FreeBSD, so you're half-way home... actually, most of Open's security stuff (pf, etc.) already runs on Free, so you could just go with what you know... a basic Free install is about 69mb. Teeny. Small enough that downloading it over decent dialup is doable (he says from experience). And pf is really sweet as far as configuration goes. The only reason I don't run it for my own firewall is I hate the whole "compile the world" paradigm that the BSDs get into.