I have two servers in the datacenter.

FreeBSD <--> Windows Server

FreeBSD configured as a gateway for Windows Server.

What is the best:

  1. FreeBSD has only firewall. All services are on the Win Server machine (e.g. firewall on FreeBSD, mail, web server on Windows Server)

  2. Services are on the both servers (e.g. mail/firewall on FreeBSD, web server on WinServer)

closed as primarily opinion-based by Jens Erat, Stephane, RoraΖ, Xander, Eric G Apr 28 '15 at 2:53

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

  • It appears that your question is only about the placement of the email server? – schroeder Apr 27 '15 at 17:05

As a general rule of thumb, running other services on security-related devices such as firewalls should be kept to a minimum. In other words, a firewall should ideally only be a firewall, and nothing else. The more services you run, the more likely one of them will contain a vulnerability that can allow an attacker to take over the machine. If that machine happens to be a firewall, it will make it much easier to compromise the rest of the network.

Not the answer you're looking for? Browse other questions tagged or ask your own question.