Mac OS X 10.3 Server Software Questions

[Anonymous]

We just recently purchased OS 10.3 Server software. I am the network administrator in the small company that I work for. I have to install it and get it all setup. I have been trying to read the literature that came with it to find out which services I think we need and can use and which ones we don't need. We have about 10 computers on our network. All OS 10.2. We currently get DSL internet access. It comes through a phone line, and into a router which is currently plugged into the switch for our ethernet. Our current server is a stand alone (not running server software). Basically just a storage device. My question is what are the advantages of setting up the router to go directly into ther server instead of the switch or is this the only way to set up VPN service and a firewall (if the internet is through the server). We would like to setup this server so that our other office can access file on it across the internet as well we could access it from home if we wanted to. After all of my reading it appears that using VPN services is how you achieve this. My next question is what are NAT services and DNS services. Are they useful, and what advantages are there to using them. We currently have and ISP who we get internet and email through as well as our website. Would it be possible to manage the email and website through our server, is that what DNS is for. That is what it seems like to me. All of our email accounts end with @graterarchitects.com. For example, mine is madams@graterarchitects.com. Any info anyone has on this would be greatly appreciated. Thanks in advance.

[James Murray]

Are you also an architect/designer/production person/cad manager in addition to sysadmin?

If so you have my job. Thank heaven for macs.

My $0.02, with all those responsibilities, I'm not looking to run any more server services than necessary. I run AFP and print. My server also runs our calendar, contacts, and of course Retrospect.

Make sure you have your libraries, standards, training, backup, and workflow running. Leave the mail and web hosting to someone else, so when it breaks, you can call them and demand action when you're on a deadline with real work. It is much cheaper to pay the guys who do it all the time.

VPN is the service for encrypted remote access. We haven't jumped in there, but I think we will soon. Sorry I can't offer any help there.

HTH, and sorry for the late reply. Good luck!

[KenMcN]

mikeadams wrote:
...We currently get DSL internet access. It comes through a phone line, and into a router which is currently plugged into the switch for our ethernet...

Our setup is very similar, although with ASIP6.2 on the server, and I'm in a similar position to yourself. I'm not claiming to be an expert, but willing to share my experience, fwiw.

My question is what are the advantages of setting up the router to go directly into ther server instead of the switch or is this the only way to set up VPN service and a firewall (if the internet is through the server).

Be careful about doing this, you might be putting the server at the 'wrong' side of the firewall (assuming it is part of the 'switch' you mentioned). If you can access the server from the internet then the firewall cannot protect it. Therefore the normal system puts the incoming data connection (ADSL possibly?) into the firewall, which then joins the network via a router or hub.

We would like to setup this server so that our other office can access file on it across the internet as well we could access it from home if we wanted to. After all of my reading it appears that using VPN services is how you achieve this.

Correct, although in our case we would need to get some software installed on the firewall (which is provided via our ISP) to allow 'controlled' access over a VPN.

My next question is what are NAT services and DNS services. Are they useful, and what advantages are there to using them.

"Network address translation" (I think this is what it stands for) is a way to allocate IP addresses dynamically within a 'closed' network, such as you office. It avoids the need to a unique IP address for each computer, as these are in relatively short supply as every computer permanently connected to the Net needs one. The DNS (Domain Name Server) software allocates these IP addresses for you and can also cut down on network traffic which apparently keeps your ISP happy
I think OS X Server can do this, although in our case it comes via the firewall.

We currently have and ISP who we get internet and email through as well as our website. Would it be possible to manage the email and website through our server...

Possible, but as jamesm said, better to leave the web site hosting to your ISP, just develop the site on your own computer and upload it to their system.
However you can easily run a mail server, which simply allows the Server to collect all the mail and then distribute it internally - much easier than everyone trying to connect to your ISP for their own mail.
Hope this helps. Good luck.
Kenny McNally.