2 nics

bill wrote:

is there any advantage of configuring a second nic so there would be one nic
for the internet and one for the LAN?

That depends what you're trying to do. If this is your proxy server,
there very well might be. Normally, however, I doubt it.

The e-mail address in our reply-to line is reversed in an attempt to
minimize spam. Our true address is of the form

Hi,
If you are running a firewall on your PC\server then there would be an
advantage - for example you could be running applications on your lan which
require a large range of port addresses to be opened, you wouldn't want to do
this on your internet connection as this could also allow the outside world
to see those ports as well. So by having one NIC for the internet you could
tie down the firewall to only allow the specific internet traffic you want
e.g. web browsing, your lan nic could then either have a very loose firewall
configuration or none at all.
If however your firewall is on your lan, and you need to route your traffic
through the lan then this would not give you any advantage at all.

Cheers
iwsec
http://www.iwsec.co.uk
http://www.vulnerability-scans.co.uk

"CJT" wrote:

bill wrote:

> is there any advantage of configuring a second nic so there would be one nic
> for the internet and one for the LAN?

That depends what you're trying to do. If this is your proxy server,
there very well might be. Normally, however, I doubt it.

The e-mail address in our reply-to line is reversed in an attempt to
minimize spam. Our true address is of the form

the reason i ask is this:

currently i have LAN and internet traffic going through the ADSL modem/router.

The internet drops off for a couple of seconds quite frequently throughout
the day. I'm think maybe the router cant handle the traffic? In this
situation would having a separte nic for the internet improve network
performance?


"IWSEC" wrote:

Hi,
If you are running a firewall on your PC\server then there would be an
advantage - for example you could be running applications on your lan which
require a large range of port addresses to be opened, you wouldn't want to do
this on your internet connection as this could also allow the outside world
to see those ports as well. So by having one NIC for the internet you could
tie down the firewall to only allow the specific internet traffic you want
e.g. web browsing, your lan nic could then either have a very loose firewall
configuration or none at all.
If however your firewall is on your lan, and you need to route your traffic
through the lan then this would not give you any advantage at all.

Cheers
iwsec
http://www.iwsec.co.uk
http://www.vulnerability-scans.co.uk

"CJT" wrote:

> bill wrote:
>
> > is there any advantage of configuring a second nic so there would be one nic
> > for the internet and one for the LAN?
>
> That depends what you're trying to do. If this is your proxy server,
> there very well might be. Normally, however, I doubt it.
>
> The e-mail address in our reply-to line is reversed in an attempt to
> minimize spam. Our true address is of the form
>

bill wrote:

the reason i ask is this:

currently i have LAN and internet traffic going through the ADSL modem/router.

"going through" in what sense?

The internet drops off for a couple of seconds quite frequently throughout
the day. I'm think maybe the router cant handle the traffic?

pretty unlikely -- ADSL isn't terribly high speed

In this

situation would having a separte nic for the internet improve network
performance?

unlikely, IMHO

"IWSEC" wrote:

Hi,
If you are running a firewall

proxy server ... firewall ... similar concept in this context

on your PC\server then there would be an

advantage - for example you could be running applications on your lan which
require a large range of port addresses to be opened, you wouldn't want to do
this on your internet connection as this could also allow the outside world
to see those ports as well. So by having one NIC for the internet you could
tie down the firewall to only allow the specific internet traffic you want
e.g. web browsing, your lan nic could then either have a very loose firewall
configuration or none at all.
If however your firewall is on your lan, and you need to route your traffic
through the lan then this would not give you any advantage at all.

Cheers
iwsec
http://www.iwsec.co.uk
http://www.vulnerability-scans.co.uk

"CJT" wrote:

bill wrote:

is there any advantage of configuring a second nic so there would be one nic
for the internet and one for the LAN?

That depends what you're trying to do. If this is your proxy server,
there very well might be. Normally, however, I doubt it.

The e-mail address in our reply-to line is reversed in an attempt to
minimize spam. Our true address is of the form

The e-mail address in our reply-to line is reversed in an attempt to
minimize spam. Our true address is of the form