Questions tagged [dmz]
In computer security, a DMZ (demilitarized zone) is a physical or logical sub-network that contains and exposes services to a larger untrusted network (usually the Internet).
94
questions
0
votes
1
answer
146
views
How iptables SNAT deal with src port dilemma between port translation fr local ip and DNAT rule that forwards all traffic to the same local ip?
Say we have a Linux based router with WAN interface eth0 ip addr 4.3.2.1 (w/ whatever gw ip) and LAN interface eth1 ip addr 192.168.51.1/24, which means we need an iptables rule below to make the ...
0
votes
0
answers
37
views
BGW320/TP-Link AX10 Port Forward Not Working
I have a TP-Link AX10 router behind a BGW320 router (set in IP passthrough mode) to the AX10. The AX10 should be receiving all external input with this configuration, but whenever I port forward / &...
0
votes
0
answers
91
views
Security Concerns for VMs in DMZ
In Vmware Workstation a VMnet8(NAT) Interface on Host System acts as a External Port for a VM Guest, If a Put the VM in DMZ can the Host get compromised or attacked as the VMnet8 has Ip addresses ...
0
votes
1
answer
106
views
Sophos UTM virtual appliance VM in DMZ
How safe would it be for a 'VM' Virtual Appliance UTM Sophos Firewall to be in DMZ. Can its security get compromised while the VM is in DMZ.. Im planning on such a setup for VPN access and certain ...
0
votes
0
answers
30
views
Setting up a 2 DMZ configuration, simulating an attacker in the middle zone, pinging hosts after the second firewall is not possible
I am setting up a network with a 2 DMZ configuration and decided to put an attacker within the middle zone of both firewalls. I am trying to ping some of the hosts that are located after the second ...
0
votes
2
answers
950
views
Make network printer accessible from outside LAN
I have an Epson L4150 printer that is perfectly accessible from inside my LAN, however I need it to accept print jobs from the internet (both from another home and from a Python script running in an ...
0
votes
1
answer
112
views
How to reach "WAN SIDE" of my lan
maybe this is a silly question and the answer is simple.
I set my router DMZ (zyxel router) to my dev server (Dns updated dynamically) and everything works good from outside my network.
From inside my ...
0
votes
0
answers
1k
views
How can I open a port on my public IP with my router?
I am trying to port forward a port on my IP. Unfortunately, my router (Sagemcom F@st 5657 interface) only lets me open ports on my private IP, which is useless if I want to connect from other ...
0
votes
0
answers
166
views
Why my server isn't accessible from outside?
I'm trying to make a Minecraft server. It works fine in LAN but my friends cannot access it outside of my LAN. I tried port forwarding (TCP/UDP 25565) but it didn't work. I turned off the windows ...
0
votes
1
answer
221
views
Disable internet access to untrusted devices?
I have a few devices in my network which have outdated firmware and I would like to make sure that they cannot communicate with the Internet.
My plan is to include a second router and build a DMZ-like ...
0
votes
1
answer
156
views
FireZilla Ftp server Cant Connect externally [duplicate]
I have an FTP server issue and I think that the main problem is my router. The facts: A) Main desktop Windows 10 with IIS server which has a website and a Microsoft SQL server Static Ip 192.168.1.100 ...
0
votes
1
answer
678
views
Can I use the ISP modem/router as only a modem? and LAN-to-WAN to another modem/router?
My ISP forces us to use their modem/router. The provided modem/router is a custom NETGEAR VEGN2610 Telco gateway.
I want to manage my LAN, WiFi & QoS using my previous modem/router: a D-Link DVA-...
0
votes
1
answer
110
views
DMZ how it works
I am very novice in Networking so hear me out please. I plan to setup the DMZ in my router and expose my CCTV Camera so it is accessible over the internet. My question is the DMZ not inside the ...
1
vote
1
answer
3k
views
DMZ and 2nd router
I have an ISP provided router modem (BT Smart Hub TypeA) that everyone at home connects to (wifi and cabling) and I want to leave this as is, so it remains as the DHCP, using 192.168.0.x/255.255.255.0 ...
2
votes
1
answer
7k
views
Isolate one computer on the LAN from all other computers on the LAN
I would like to know how I can best and most readily set up a single PC on my network such that it cannot see any of the others PCs or access any of their resources. The PC must still be able to ...
0
votes
0
answers
688
views
Port forward or DMZ not working on tp-link archer a7 ac1750
i have minecraft server on a old pc with debian, portforward in the router doesn't work
i also tried DMZ but not works, 2 months ago port forward works, today i changed my lan ip address and subnet ...
3
votes
0
answers
184
views
Trying to run a local server with port forwarding behind a carrier grade network from ISP, but getting no connection with localhost
i'm trying to make a half life server by portforwarding trought my router. It didn't work, i checked it out, and my public IP and my WAN IP were different, then i realised that i was in a carrier ...
4
votes
2
answers
12k
views
Difference between DMZ and VLAN
I would like to know the difference between a DMZ and a VLAN (either a private or community VLAN).
It would be wonderful if you could help me out!
Thanks in advance!
1
vote
1
answer
1k
views
Should I use DMZ for a public NextCloud server hosted on a home network?
I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
1
vote
0
answers
2k
views
DMZ to another router for WAN IP
I have 2 ISPs (One I am getting rid of -- Bell Canada).
The first provider is Bell Canada and they use PPPOE and is connected via DSL and it's a modem/router in one.
The second provider is Rogers ...
0
votes
0
answers
756
views
OpenVPN server on DMZ router
I am stuck with the ISP modem/roter and I want to use a second router with VPN capabilities, but I cannot get the OpenVPN server to work.
Please do not suggest to put the first router as bridge as I ...
1
vote
0
answers
317
views
DMZ vs Port Forwarding
We're a medium sized company and working with a vendor who requires us to set up a server. The connection to this server is from a list of fixed IP addresses in the cloud. They have only required the ...
4
votes
4
answers
15k
views
How to expose a home PC behind CG-NAT using a VPS?
Previously I had my home workstation PC directly exposed to the internet simply by setting it as the DMZ PC in my router's settings, and I could access any services I was running on it: SSH, Web ...
0
votes
0
answers
537
views
DMZ (Portforwarding) in OpenVPN
I am running an self-hosted openvpn server with few clients. I want to expose 1 client to the external network, how can I do that? I see similar option in paid admin panel, but I'm using the free ...
3
votes
1
answer
18k
views
How to setup Home Networking DMZ Using Two Routers
I decided to get a better router than using my ISP supplied modem/router. Thus I am not interested in using my new router as access point nor bridge mode. I prefer having two internet accessible ...
1
vote
1
answer
41
views
DMZ Network terming confusion [closed]
I have a question regarding the correct term and meaning of a DMZ network.
We have in our company the following network stack:
Internal Clients network 192.168.0.0/24 we call it company LAN
Server ...
1
vote
0
answers
969
views
How can I determine who is blocking port 25 from the internet?
I'm flummoxed.
I've bought a domain name through 'freehostia.com' - and I've setup the MX records to point to my DDNS based local SMTP/POP3 server which I'm running on a Synology NAS box.
I've ...
2
votes
0
answers
246
views
Pass port traffic from home router > pfsense VM > gaming server
I want to setup a gaming server on a physical host I have at home. I am having trouble passing traffic through my home router to the pfsense VM, to the gaming host.
My network looks like this:
Home ...
0
votes
1
answer
16k
views
DMZ vs Port-Forwarding [closed]
In some ISP(s) new routers the DMZ option is absent
In this cases I sometimes solve the problem
Redirecting all ports (1-65535) as VirtualPorts
to the intended DMZ machine (Port-Forwarding)
What ...
0
votes
1
answer
243
views
Why can't I reach SSH from my public IP but random hacker-bots can?
I have a Raspberry Pi3 with Raspbian Stretch that is behind a home router.
/var/log/auth.log in the RPi consistently shows failed login attempts with generic usernames (root, operator, webmaster, and ...
2
votes
0
answers
513
views
separating two networks with DMZ?
I am a college student wanting to get into server and networking but I have an issue I need help with at home. I asked a question about a year ago about creating two separate networks with the same ...
1
vote
1
answer
1k
views
Does DMZ direct traffic to its target even if initiated by another computer inside LAN?
Suppose my setup looked like this:
Router 1 connects to the Internet (i.e. the modem).
Router 2's WAN port connects to a LAN port of Router 1. (I.e. Router 2 is a 'router behind router' with its own ...
0
votes
1
answer
243
views
Single-sign-on in DMZ / OpenLDAP
we have a dmz with several https-based services, which users from internal network use although as users from outside.
To ensure authentification with the active directory user-credentials, we set up ...
0
votes
0
answers
1k
views
DMZ to LAN. SMB Print and File Sharing not working
I have a Windows Server 2008 r2 machine on DMZ. We have a shared folder on there that one day a couple weeks ago was no longer able to be accessed. No changes occurred except for maybe windows ...
0
votes
1
answer
168
views
App having access to dynamic IP DMZ host in home network
I have a set of Dahua home cameras connected to my home network. The router is one provided by my ISP. Now after creating on the router a DMZ host from the cameras' recorder I am able to get live ...
1
vote
1
answer
372
views
Can I setup one router (modem) for ethernet internet only and another router for Wifi only on the same network?
The Goal: To be able to only turn on the WiFi only when we need it while having continuous access to internet via ethernet (hard-wired). I've found a Bluetooth controlled outlet that I can plug the ...
1
vote
2
answers
3k
views
Home network: DMZ or not?
Router: Asus RT AC-66U
Setup:
Router, IP 10.0.0.1
Apache2 server, IP 10.0.0.2
Clients etc., IP 10.0.0.X
Virtual servers:
All traffic on port 80 forwarded to 10.0.0.2, port 80.
Pretty simple setup.
...
3
votes
2
answers
238
views
Is a forwarded port vulnerable to exploit if there is no software listening for connections on that port?
Does forwarding a port to a device (or DMZing the device) mean the device is susceptible to prodding on the opened ports even if no software listening to those ports is running on the device?
e.g.: ...
0
votes
0
answers
46
views
Setting up honeynet behind DSL router
I have setup double honeynet for capturing polymorphic worms as shown in the figure.
The whole setup is in Virtual environment on a single host. I want all the traffic to reach the internal router ...
-1
votes
2
answers
2k
views
DMZ - Active Directory - (Philosophy)
I have searched all over and found a lot of different answers to my question with no real direct Yes or No.
I made a very crude network diagram to explain what I would like to setup.
I have setup a ...
0
votes
0
answers
2k
views
cannot access my web server after setting up a DMZ with my mobile broadband router
I am trying to open my web server to the internet in order to give some friends a view on my on-development websites. Since I gave up trying with the port forward way (my ISP is probably not allowing ...
0
votes
0
answers
603
views
Difference between placing a server behind a DMZ vs directly behind a WAN
My ISP provides a block of 5 IPs. I have an 8 port switch that my ISP is connected to, and one of the ports goes to my Ubiquiti Edgerouter to provide Internet access to my home PCs.
I recently ...
0
votes
1
answer
1k
views
connect 2 different lan's for internet access and DMZ
i got 2 routers one has ip address like 192.168.1.1 and is connected to my ISP's fast internet access
My ISP does not provide me with static ip services so i bought static ip vpn service from ...
3
votes
1
answer
3k
views
Is it safe to add a router to a modem without bridge mode by using DMZ?
I cannot alter my modem firmware and there's no legal way to enable bridge mode. I want to add a router so that I can have complete control over the network.
If I use DMZ to achieve this, how secure ...
1
vote
2
answers
2k
views
Can a server in a DMZ pose a security risk to the rest of the network?
I'm on the road a lot for work so and I was thinking I might take an old laptop and set up some VM labs to play around with on it that I can access when I'm away from home.
It would just be a ...
4
votes
1
answer
1k
views
Configuration of DMZ on LRT214
I want to learn more about network technology. Therefore I want to run a raspberry pi in the DMZ as a web server.
What is working:
Appache Server on the pi is working. When I use it in the LAN and ...
1
vote
1
answer
423
views
Layer-2-Accessible DMZ: ebtables?
I'd like to make a network topology where all the IoT devices (printer, DVR, thermostat, BluRay player, etc) are all in a DMZ and the rest of my devices are all on the LAN. Note that the usage of DMZ ...
0
votes
1
answer
140
views
I am not able to connect my software with my public IP
please help me in port forwarding. i m stuck in the middle.
suppose my local ip is - 192.168.0.103
and public ip is - 49.248.xx.xxx
I have D-link DSL-2520U ADSL2+ modem router
so here is what i do, i ...
1
vote
0
answers
143
views
NTP not getting through even to DMZ
My home router seems to be blocking UDP 123.
sudo ntpdate -u time.apple.com
works as expected, but
sudo ntpdate time.apple.com
I get: "no server suitable for synchronization found"
I can get a ...
2
votes
1
answer
9k
views
Two playstations on one network
In my house I have 2 playstations. My wife and I both play together. On all sort of games but mostly on call of duty. Recently we have been playing Black Ops 3 and have been having problems. We have ...