In my organization, I'd like to make sure all servers are only accessible from the inside. The only exceptions are the mail and webservers.
What's the best way to do this?
My own suggestion was blocking ALL incoming traffic via 'iptables' except mail and web traffic (and SSH) Is this the best way to do this or are there any better suggestions?
Thanks!
EDIT:
I found a pretty similar topology as ours: