This document describes an industry standard best practice for handling on-site customer colocation of a Referral Trak server on a customer network.

The Referral Trak server is in and of itself a firewall. We built the system in this very manner so that if a client does not have a dmz the Referral Trak
Server is **already** protecting itself fully.

Customers that wish to protect the rest of their network should follow the below guidelines:

1. Install the Referral Trak Server to your DMZ network. The DMZ will be the 3rd interface on you firewall or the lan between your firewall and screening
router.

2. (Optional) Filter ALL incoming traffic to the Referral Trak Server ecept for the Richweb NOC IP list:

63.90.9.0/24
208.73.136.0/23