In a single-server-enviroment an webserver for internal use
only has to be implemented (package from nsbs6 with tomcat,
apache, nsweb for nsearch). BM36EE is on the same server.
NAT on public nic is dynamic only. Is the the filter-setup
save enough to go this way?

Filter-Exceptions are:

Exceptions:
#1
Packet Type: new cod/tcp-st
Source: INTERN
All Circuits
192.168.6.12
Destination: EXTERN
All Circuits
62.116.172.152
Comment: CallOfDuty hinzugefgt am 15.01.2004. KK

#2
Packet Type: new ntp-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Allow outbound ntp, p165, 11.11.03
KK

#3
Packet Type: ftp-port-pasv-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: FTP through proxy only, p279,
07.09.03 KK

#4
Packet Type: dns/udp-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: DNS/UDP through proxy only, p279,
07.09.03

#5
Packet Type: new http-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Allow outbound http/proxy only,
p278.

#6
Packet Type: new https-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Allow outbound https/proxy only,
p278.

#7
Packet Type: new nntp-st
Source: EXTERN
All Circuits
10.0.0.1
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Allow non-standard/proxy only,
p279.

#8
Packet Type: pop3-st
Source: EXTERN
All Circuits
Any Address
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Allow outbound pop3, p172,
10.09.03 KK

#9
Packet Type: smtp-st
Source: EXTERN
All Circuits
Any Address
Destination: EXTERN
All Circuits
Any Address
Comment: Craig: Outbound smtp for internal hosts,
p182.

#10
Packet Type: ftp-port-pasv-st
Source: INTERN
All Circuits
Any Address
Destination: EXTERN
All Circuits
Any Address
Comment: Hinzugefgt am 30-09-03 fr
NetObjectsFusion.

#11
Packet Type: new cod/udp-st
Source: INTERN
All Circuits
192.168.6.12
Destination: EXTERN
All Circuits
62.116.172.152
Comment: CallOfDuty hinzugefgt am 15.01.2004. KK