Thoughts of a Sysadmin

My network consists of two physical locations, connected by an IPSEC VPN tunnel.  Each location contains both a LAN network segment and a DMZ Network segment.  All Internet facing servers are located in the DMZ.  Access to the LAN segment from the Internet is accomplished through reverse proxy servers.  Both LAN segments can access both DMZ segments and each other.  Communication between DMZ segments is restricted.

Each site has a primary virtual file server running Open Enterprise Server 2.

• Samba for Windows(R) File Shares and WINS
• ISC DHCP Server
• BIND DNS Server
• OpenSLP
• Apache2 / PHP5 / MySQL5 /Tomcat5
• eDirectory 8.8.2
• Webmin

Each site has a virtual SmoothWall firewall appliance, a virtual Ubuntu web server and a virtual Ubuntu proxy server.