Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Simple enough really. Can I create a IPSEC rule/filter between two publically available servers (they are actually on the same network) while still allow external traffic to the same resources.

I'll try to give as much info as possible:

Web Server <--> Database Server, of which both have Public IPs.

I want to secure database traffic/connections from the web server but yet still allow external direct connections, from my office, to the database server, if needed.

The thing is, and the reason I ask all this, is that the two servers are Virtuzzo servers in a data centre somewhere, maybe even on the both hardware node. I'd like for the "between" server traffic to be secure at least.

I found many step by step guides on how to setup the filters, I just want to confirm my request.

share|improve this question
up vote 1 down vote accepted

Yes you can do this and I highly recommend doing so, if you want direct connections to the DB server from a non intranet location. The external allow rule should only allow the traffic from the ports you want (eg 80 443)

share|improve this answer
Right, gotcha. So it is possible. I asked because most of the resources on how to create the IPsec tunnel between servers blocked all external connections. I don't suppose you know of any resources that help me with my specific issue? – Anthony Apr 5 '11 at 12:05
the only thing that comes to mind would be the domain and server isolation accelerator – Jim B Apr 5 '11 at 14:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.