My boss recently enrolled me in an InfoSec training. I am part of the network team, but have limited experience in InfoSec.
My first assignment is to draw a layout of a network that will be used later in a CTF-wargame between the participants of the course.
The network must count
a mail server
a web server
- an 'old' Windows XP-box (supposed to run a legacy web app, and i as sysadmin have no root access to this box)
All of the above must be publicly reachable. Furthermore we must also include the following:
two user PC's (they do not have to accept incoming traffic, but must be able to acces the internet)
a MySQL-server (to store the data of the legacy web app on the XP box, so at least accesible by that box)
a CISCO Catalyst switch
This network will be 'under attack' during the various stages of the training, and we are asked to 'harden' it by use of firewalls, routing rules, monitoring & protection devices, ...
I have zero experience in designing such a network, but decided to give it my best shot, so i kindly ask the Stackexchange-panel for help :)
I was thinking of separating the email/web server and the XP-box (+ MySQL ?) on 3 separate VLAN's and putting the user PC's behind a well-configured firewall.
EDIT: question was too broad, so narrowed it down:
Everything would run on Linux (was thinking of virtualizing the XP on Linux as well), so what would be a good Linux/Apache/MySQL setup ?
A lot to ask, I know, but I hope to get some answers to ge me on the right track. All help (answers, links to best practices, hints & tips,...) more than welcome !! Thanks in advance :)