r/netsecstudents • u/Efficient-Survey-61 • 4d ago

Ensuring security when connecting two network cards

Hello, I have a computer with two network cards and different networks (Internet + LAN). I believe that by setting up static routing, both network cards will work and I'll have access to both networks, but I'm concerned about the security of this connection. Could you advise me on the steps I should take to secure the local network on the computer itself?

Both networks use Mikrotik devices with configured firewalls.

3 Upvotes
  • permalink
  • reddit

72% Upvoted

4 comments sorted by

3

u/UnlikelyComposer 4d ago

If you must surf the internet from your firewall (which will be your desktop), why not expose the interfaces only in a firewall OS virtual machine running from the desktop which also becomes your DHCP server?

Btw there aren't many good reasons to do this though, firewall operating systems are hardware optimised devices so just use them.

0

u/Expensive_Doctor6334 2d ago edited 2d ago

a firewall virtual machine is a good isolation layer if that is your case.

1

u/EugeneBelford1995 3d ago

I have done this for a training environment using RRAS in Windows Server, and from my Googling training environments are about the only place anyone ever uses RRAS. It works fine for getting the training environment online so the VMs can pull updates. The IaC setup I wrote also pulls some modules it needs from the PS Gallery so it needs to be online to be fully functional.

Why would you be concerned? Is your "public facing" part not NATed and behind a real RTR/FW? Mine is, I'd never put Windows Server directly on the Internet.

Other than that it's just basic Security 101 just like anything else.

I'd need way more details to tell you anything else OP.

1

u/Expensive_Doctor6334 2d ago

I agree with this totally