Questions tagged [dmz]

In computer security, a DMZ (demilitarized zone) is a physical or logical sub-network that contains and exposes services to a larger untrusted network (usually the Internet).

Filter by
Sorted by
Tagged with
0 votes
1 answer
145 views

How iptables SNAT deal with src port dilemma between port translation fr local ip and DNAT rule that forwards all traffic to the same local ip?

Say we have a Linux based router with WAN interface eth0 ip addr 4.3.2.1 (w/ whatever gw ip) and LAN interface eth1 ip addr 192.168.51.1/24, which means we need an iptables rule below to make the ...
Ning Yu Fisher's user avatar
0 votes
0 answers
37 views

BGW320/TP-Link AX10 Port Forward Not Working

I have a TP-Link AX10 router behind a BGW320 router (set in IP passthrough mode) to the AX10. The AX10 should be receiving all external input with this configuration, but whenever I port forward / &...
arandomperson's user avatar
0 votes
0 answers
91 views

Security Concerns for VMs in DMZ

In Vmware Workstation a VMnet8(NAT) Interface on Host System acts as a External Port for a VM Guest, If a Put the VM in DMZ can the Host get compromised or attacked as the VMnet8 has Ip addresses ...
CrazyFirewall's user avatar
0 votes
1 answer
106 views

Sophos UTM virtual appliance VM in DMZ

How safe would it be for a 'VM' Virtual Appliance UTM Sophos Firewall to be in DMZ. Can its security get compromised while the VM is in DMZ.. Im planning on such a setup for VPN access and certain ...
CrazyFirewall's user avatar
0 votes
0 answers
30 views

Setting up a 2 DMZ configuration, simulating an attacker in the middle zone, pinging hosts after the second firewall is not possible

I am setting up a network with a 2 DMZ configuration and decided to put an attacker within the middle zone of both firewalls. I am trying to ping some of the hosts that are located after the second ...
pdaranda661's user avatar
0 votes
2 answers
949 views

Make network printer accessible from outside LAN

I have an Epson L4150 printer that is perfectly accessible from inside my LAN, however I need it to accept print jobs from the internet (both from another home and from a Python script running in an ...
Omar Morales Rivera's user avatar
0 votes
1 answer
112 views

How to reach "WAN SIDE" of my lan

maybe this is a silly question and the answer is simple. I set my router DMZ (zyxel router) to my dev server (Dns updated dynamically) and everything works good from outside my network. From inside my ...
Nik Rubblers's user avatar
0 votes
0 answers
1k views

How can I open a port on my public IP with my router?

I am trying to port forward a port on my IP. Unfortunately, my router (Sagemcom F@st 5657 interface) only lets me open ports on my private IP, which is useless if I want to connect from other ...
alex12's user avatar
  • 1
0 votes
0 answers
166 views

Why my server isn't accessible from outside?

I'm trying to make a Minecraft server. It works fine in LAN but my friends cannot access it outside of my LAN. I tried port forwarding (TCP/UDP 25565) but it didn't work. I turned off the windows ...
TIPDYT's user avatar
  • 3
0 votes
1 answer
221 views

Disable internet access to untrusted devices?

I have a few devices in my network which have outdated firmware and I would like to make sure that they cannot communicate with the Internet. My plan is to include a second router and build a DMZ-like ...
Daniel Marschall's user avatar
0 votes
1 answer
156 views

FireZilla Ftp server Cant Connect externally [duplicate]

I have an FTP server issue and I think that the main problem is my router. The facts: A) Main desktop Windows 10 with IIS server which has a website and a Microsoft SQL server Static Ip 192.168.1.100 ...
David Dan's user avatar
0 votes
1 answer
678 views

Can I use the ISP modem/router as only a modem? and LAN-to-WAN to another modem/router?

My ISP forces us to use their modem/router. The provided modem/router is a custom NETGEAR VEGN2610 Telco gateway. I want to manage my LAN, WiFi & QoS using my previous modem/router: a D-Link DVA-...
drk_hale's user avatar
0 votes
1 answer
110 views

DMZ how it works

I am very novice in Networking so hear me out please. I plan to setup the DMZ in my router and expose my CCTV Camera so it is accessible over the internet. My question is the DMZ not inside the ...
Hawk's user avatar
  • 103
1 vote
1 answer
3k views

DMZ and 2nd router

I have an ISP provided router modem (BT Smart Hub TypeA) that everyone at home connects to (wifi and cabling) and I want to leave this as is, so it remains as the DHCP, using 192.168.0.x/255.255.255.0 ...
Julian Bennett's user avatar
2 votes
1 answer
7k views

Isolate one computer on the LAN from all other computers on the LAN

I would like to know how I can best and most readily set up a single PC on my network such that it cannot see any of the others PCs or access any of their resources. The PC must still be able to ...
Gork's user avatar
  • 23
0 votes
0 answers
688 views

Port forward or DMZ not working on tp-link archer a7 ac1750

i have minecraft server on a old pc with debian, portforward in the router doesn't work i also tried DMZ but not works, 2 months ago port forward works, today i changed my lan ip address and subnet ...
alex983's user avatar
3 votes
0 answers
184 views

Trying to run a local server with port forwarding behind a carrier grade network from ISP, but getting no connection with localhost

i'm trying to make a half life server by portforwarding trought my router. It didn't work, i checked it out, and my public IP and my WAN IP were different, then i realised that i was in a carrier ...
João Peterson Scheffer's user avatar
4 votes
2 answers
12k views

Difference between DMZ and VLAN

I would like to know the difference between a DMZ and a VLAN (either a private or community VLAN). It would be wonderful if you could help me out! Thanks in advance!
Blackd00r's user avatar
1 vote
1 answer
1k views

Should I use DMZ for a public NextCloud server hosted on a home network?

I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
user avatar
1 vote
0 answers
2k views

DMZ to another router for WAN IP

I have 2 ISPs (One I am getting rid of -- Bell Canada). The first provider is Bell Canada and they use PPPOE and is connected via DSL and it's a modem/router in one. The second provider is Rogers ...
Brandon's user avatar
  • 175
0 votes
0 answers
756 views

OpenVPN server on DMZ router

I am stuck with the ISP modem/roter and I want to use a second router with VPN capabilities, but I cannot get the OpenVPN server to work. Please do not suggest to put the first router as bridge as I ...
mvcad's user avatar
  • 3
1 vote
0 answers
317 views

DMZ vs Port Forwarding

We're a medium sized company and working with a vendor who requires us to set up a server. The connection to this server is from a list of fixed IP addresses in the cloud. They have only required the ...
zerose's user avatar
  • 11
4 votes
4 answers
15k views

How to expose a home PC behind CG-NAT using a VPS?

Previously I had my home workstation PC directly exposed to the internet simply by setting it as the DMZ PC in my router's settings, and I could access any services I was running on it: SSH, Web ...
MestreLion's user avatar
  • 2,657
0 votes
0 answers
537 views

DMZ (Portforwarding) in OpenVPN

I am running an self-hosted openvpn server with few clients. I want to expose 1 client to the external network, how can I do that? I see similar option in paid admin panel, but I'm using the free ...
Sadi's user avatar
  • 101
3 votes
1 answer
18k views

How to setup Home Networking DMZ Using Two Routers

I decided to get a better router than using my ISP supplied modem/router.  Thus I am not interested in using my new router as access point nor bridge mode.   I prefer having two internet accessible ...
Kim Steve's user avatar
1 vote
1 answer
41 views

DMZ Network terming confusion [closed]

I have a question regarding the correct term and meaning of a DMZ network. We have in our company the following network stack: Internal Clients network 192.168.0.0/24 we call it company LAN Server ...
DonMcCoy's user avatar
1 vote
0 answers
969 views

How can I determine who is blocking port 25 from the internet?

I'm flummoxed. I've bought a domain name through 'freehostia.com' - and I've setup the MX records to point to my DDNS based local SMTP/POP3 server which I'm running on a Synology NAS box. I've ...
Mordachai's user avatar
  • 133
2 votes
0 answers
246 views

Pass port traffic from home router > pfsense VM > gaming server

I want to setup a gaming server on a physical host I have at home. I am having trouble passing traffic through my home router to the pfsense VM, to the gaming host. My network looks like this: Home ...
Paul Hill's user avatar
0 votes
1 answer
16k views

DMZ vs Port-Forwarding [closed]

In some ISP(s) new routers the DMZ option is absent In this cases I sometimes solve the problem Redirecting all ports (1-65535) as VirtualPorts to the intended DMZ machine (Port-Forwarding) What ...
ZEE's user avatar
  • 948
0 votes
1 answer
243 views

Why can't I reach SSH from my public IP but random hacker-bots can?

I have a Raspberry Pi3 with Raspbian Stretch that is behind a home router. /var/log/auth.log in the RPi consistently shows failed login attempts with generic usernames (root, operator, webmaster, and ...
Alexandre Cariage's user avatar
2 votes
0 answers
513 views

separating two networks with DMZ?

I am a college student wanting to get into server and networking but I have an issue I need help with at home. I asked a question about a year ago about creating two separate networks with the same ...
Josiah Christiansen's user avatar
1 vote
1 answer
1k views

Does DMZ direct traffic to its target even if initiated by another computer inside LAN?

Suppose my setup looked like this: Router 1 connects to the Internet (i.e. the modem). Router 2's WAN port connects to a LAN port of Router 1. (I.e. Router 2 is a 'router behind router' with its own ...
user avatar
0 votes
1 answer
243 views

Single-sign-on in DMZ / OpenLDAP

we have a dmz with several https-based services, which users from internal network use although as users from outside. To ensure authentification with the active directory user-credentials, we set up ...
Skullbone's user avatar
0 votes
0 answers
1k views

DMZ to LAN. SMB Print and File Sharing not working

I have a Windows Server 2008 r2 machine on DMZ. We have a shared folder on there that one day a couple weeks ago was no longer able to be accessed. No changes occurred except for maybe windows ...
BuckeyeRJB's user avatar
0 votes
1 answer
168 views

App having access to dynamic IP DMZ host in home network

I have a set of Dahua home cameras connected to my home network. The router is one provided by my ISP. Now after creating on the router a DMZ host from the cameras' recorder I am able to get live ...
adamczi's user avatar
  • 214
1 vote
1 answer
372 views

Can I setup one router (modem) for ethernet internet only and another router for Wifi only on the same network?

The Goal: To be able to only turn on the WiFi only when we need it while having continuous access to internet via ethernet (hard-wired). I've found a Bluetooth controlled outlet that I can plug the ...
Samuel Stevenson's user avatar
1 vote
2 answers
3k views

Home network: DMZ or not?

Router: Asus RT AC-66U Setup: Router, IP 10.0.0.1 Apache2 server, IP 10.0.0.2 Clients etc., IP 10.0.0.X Virtual servers: All traffic on port 80 forwarded to 10.0.0.2, port 80. Pretty simple setup. ...
knoten's user avatar
  • 123
3 votes
2 answers
238 views

Is a forwarded port vulnerable to exploit if there is no software listening for connections on that port?

Does forwarding a port to a device (or DMZing the device) mean the device is susceptible to prodding on the opened ports even if no software listening to those ports is running on the device? e.g.: ...
Rudy's user avatar
  • 177
0 votes
0 answers
46 views

Setting up honeynet behind DSL router

I have setup double honeynet for capturing polymorphic worms as shown in the figure. The whole setup is in Virtual environment on a single host. I want all the traffic to reach the internal router ...
Naveen H's user avatar
-1 votes
2 answers
2k views

DMZ - Active Directory - (Philosophy)

I have searched all over and found a lot of different answers to my question with no real direct Yes or No. I made a very crude network diagram to explain what I would like to setup. I have setup a ...
CenturyX476's user avatar
0 votes
0 answers
2k views

cannot access my web server after setting up a DMZ with my mobile broadband router

I am trying to open my web server to the internet in order to give some friends a view on my on-development websites. Since I gave up trying with the port forward way (my ISP is probably not allowing ...
umbe1987's user avatar
  • 119
0 votes
0 answers
603 views

Difference between placing a server behind a DMZ vs directly behind a WAN

My ISP provides a block of 5 IPs. I have an 8 port switch that my ISP is connected to, and one of the ports goes to my Ubiquiti Edgerouter to provide Internet access to my home PCs. I recently ...
unplugged's user avatar
0 votes
1 answer
1k views

connect 2 different lan's for internet access and DMZ

i got 2 routers one has ip address like 192.168.1.1 and is connected to my ISP's fast internet access My ISP does not provide me with static ip services so i bought static ip vpn service from ...
asiawatcher's user avatar
3 votes
1 answer
3k views

Is it safe to add a router to a modem without bridge mode by using DMZ?

I cannot alter my modem firmware and there's no legal way to enable bridge mode. I want to add a router so that I can have complete control over the network. If I use DMZ to achieve this, how secure ...
user avatar
1 vote
2 answers
2k views

Can a server in a DMZ pose a security risk to the rest of the network?

I'm on the road a lot for work so and I was thinking I might take an old laptop and set up some VM labs to play around with on it that I can access when I'm away from home. It would just be a ...
Kefka's user avatar
  • 1,426
4 votes
1 answer
1k views

Configuration of DMZ on LRT214

I want to learn more about network technology. Therefore I want to run a raspberry pi in the DMZ as a web server. What is working: Appache Server on the pi is working. When I use it in the LAN and ...
BerndGit's user avatar
  • 249
1 vote
1 answer
423 views

Layer-2-Accessible DMZ: ebtables?

I'd like to make a network topology where all the IoT devices (printer, DVR, thermostat, BluRay player, etc) are all in a DMZ and the rest of my devices are all on the LAN. Note that the usage of DMZ ...
iAdjunct's user avatar
  • 1,652
0 votes
1 answer
140 views

I am not able to connect my software with my public IP

please help me in port forwarding. i m stuck in the middle. suppose my local ip is - 192.168.0.103 and public ip is - 49.248.xx.xxx I have D-link DSL-2520U ADSL2+ modem router so here is what i do, i ...
Syed Saif's user avatar
1 vote
0 answers
143 views

NTP not getting through even to DMZ

My home router seems to be blocking UDP 123. sudo ntpdate -u time.apple.com works as expected, but sudo ntpdate time.apple.com I get: "no server suitable for synchronization found" I can get a ...
singpolyma's user avatar
  • 1,059
2 votes
1 answer
9k views

Two playstations on one network

In my house I have 2 playstations. My wife and I both play together. On all sort of games but mostly on call of duty. Recently we have been playing Black Ops 3 and have been having problems. We have ...
kid622's user avatar
  • 21