It seems like if I set a computer up as a DMZ to host, say, a Minecraft server, then I'd still need to port forward.

Otherwise how will the router know which local computer to send them to when they access my external IP?


No, DMZ in essence means "forward ALL ports" to X. You should only DMZ a host that you know is very secure as its attack surface is significantly increased. If you need just one or two services open, best to not use DMZ.

| improve this answer | |
  • I see. I don't think it's possible to port forward with my router so I have to resort to this. Arris TG1672G has no capacity for port forwarding – David Bandel Dec 16 '15 at 7:46
  • (it pretends to, but always gives error messages when you try to create a virtual server) – David Bandel Dec 16 '15 at 7:57
  • @DavidBandel It does, its labelled virtual servers ;) EDIT: we posted at the same time, whats the error? – Linef4ult Dec 16 '15 at 7:58
  • "Table FWVirtSrvTable Full" - and I have no virtual servers created. No port forwarding whatsoever. (also I was able to do it before but now it gives this error and I can't really do anything) – David Bandel Dec 16 '15 at 8:11
  • @DavidBandel Strange. Also you really shouldnt spam the stack network, I can see you've posted at least three different questions about essentially the same topic. Especially not network engineering.. – Linef4ult Dec 16 '15 at 8:14

It depends on how many normal* IPs you have.

  • If you only have one IP and use NAT then yes, you will need to forward a port. This is reasonably standard, even on cheap SoHo devices.
  • If you habve multiple IPs then just assign a second IP to the computer running the minecraft server. Frm that point on it is routing as normal.

And if you have IPv6 (still not in use everywhere despite being available for 2 decades) then you probably can use thousands of IP addresses. In which case you should check if there is anyone with a minecraft client which still lacks this ancient access. (In which case you need to fall back to the IPv4 options or tell him/her to get with the times).

*Normal as in public IPs, or sometimes called external IPs. Not RFC1918 range IPs which includes the well known range.

| improve this answer | |
  • Not sure what you're talking about with multiple IPs. Multiple external ips? Or local on my network. I just have one external IP, I set up a DMZ, and I also need to port forward to it to run a server you're saying? – David Bandel Dec 16 '15 at 7:54
  • ` just have one external IP,` that is what I meant with on IP. I will edit to clarify that. Sadly only one normal/public IP is common these days, but the Internet was designed with the idea that each device would get its own [public] IP. NAT is aan ugly kludge to work around running out of numbers. – Hennes Dec 16 '15 at 7:57
  • Ok so I absolutely do need to port forward in addition to DMZ? One external IP. One computer among multiple on network. Trying to run Minecraft server – David Bandel Dec 16 '15 at 8:10
  • Yes. One IP (probably on a combination of modem firewall, router and WAP). That means that that one device is the only one you can reach directly from the Internet. If you want to have something reach another device inside the network than this 'swissarmyknife' must forward that. – Hennes Dec 16 '15 at 8:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.