Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a web server on a DMZ that needs to read/write to a single file location on our Server 2003 Domain. What is the best way to do this?

share|improve this question
    
Read / write using what protocol(s)? Windows share? FTP?... –  squillman Mar 24 '11 at 20:57
    
Depends on the requirements, it would be better to schedule data pickup from the server using some scheduled script FROM the internal network. In essence, don't allow access from within the DMZ to the internal LAN. –  Vick Vega Mar 24 '11 at 21:02
    
@Squillman - I don't know, that's why I'm asking. –  Jess Mar 24 '11 at 21:35
    
@Vick - Scheduled pickup might work ... however, if for some reason we needed to access it directly, any suggestions? –  Jess Mar 24 '11 at 21:40
    
@Jess - Lock down the firewall to allow access ONLY one specific machine, create a LOCAL username on that server and allow access to only one specific folder. –  Vick Vega Mar 25 '11 at 23:45
show 2 more comments

2 Answers

up vote 1 down vote accepted

Depends on the requirements, it would be better to schedule data pickup from the server using some scheduled script FROM the internal network. In essence, don't allow access from within the DMZ to the internal LAN.

share|improve this answer
add comment

You could use webdav over ssl giving only the computer account access to the file. Using webdav you can map a drive to the SSL location of the server.

Of course there are still other things to take into account like firewall configs, what you do with the file (if anything) when you download it locally, if the machine's are both members of the same domain (or trusted), etc.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.