Questions tagged [dmz]

In computer security, a DMZ (demilitarized zone) is a physical or logical sub-network that contains and exposes services to a larger untrusted network (usually the Internet).

Filter by
Sorted by
Tagged with
0 votes
1 answer
6k views

How to setup DMZ in router with DD-WRT firmware?

I have a router d-link dir-300, flashed to dd-wrt v24. By the unknwon reasons web interface not working. Spawning in console httpd, didnt help. Now I need a DMZ ip. How I can setup it with standard ...
1 vote
2 answers
4k views

Public IP address port forwarding goes to my router's homepage and not my laptop’s server

I am trying to turn my laptop into an internal server to be accessed from anyone on the Internet. But whenever someone types my public IP address into their URL bar it sends them to my router’s config ...
4 votes
4 answers
15k views

How to expose a home PC behind CG-NAT using a VPS?

Previously I had my home workstation PC directly exposed to the internet simply by setting it as the DMZ PC in my router's settings, and I could access any services I was running on it: SSH, Web ...
2 votes
1 answer
7k views

Isolate one computer on the LAN from all other computers on the LAN

I would like to know how I can best and most readily set up a single PC on my network such that it cannot see any of the others PCs or access any of their resources. The PC must still be able to ...
0 votes
1 answer
151 views

How iptables SNAT deal with src port dilemma between port translation fr local ip and DNAT rule that forwards all traffic to the same local ip?

Say we have a Linux based router with WAN interface eth0 ip addr 4.3.2.1 (w/ whatever gw ip) and LAN interface eth1 ip addr 192.168.51.1/24, which means we need an iptables rule below to make the ...
0 votes
0 answers
37 views

BGW320/TP-Link AX10 Port Forward Not Working

I have a TP-Link AX10 router behind a BGW320 router (set in IP passthrough mode) to the AX10. The AX10 should be receiving all external input with this configuration, but whenever I port forward / &...
0 votes
0 answers
93 views

Security Concerns for VMs in DMZ

In Vmware Workstation a VMnet8(NAT) Interface on Host System acts as a External Port for a VM Guest, If a Put the VM in DMZ can the Host get compromised or attacked as the VMnet8 has Ip addresses ...
0 votes
1 answer
110 views

Sophos UTM virtual appliance VM in DMZ

How safe would it be for a 'VM' Virtual Appliance UTM Sophos Firewall to be in DMZ. Can its security get compromised while the VM is in DMZ.. Im planning on such a setup for VPN access and certain ...
3 votes
1 answer
18k views

How to setup Home Networking DMZ Using Two Routers

I decided to get a better router than using my ISP supplied modem/router.  Thus I am not interested in using my new router as access point nor bridge mode.   I prefer having two internet accessible ...
0 votes
0 answers
30 views

Setting up a 2 DMZ configuration, simulating an attacker in the middle zone, pinging hosts after the second firewall is not possible

I am setting up a network with a 2 DMZ configuration and decided to put an attacker within the middle zone of both firewalls. I am trying to ping some of the hosts that are located after the second ...
0 votes
2 answers
992 views

Make network printer accessible from outside LAN

I have an Epson L4150 printer that is perfectly accessible from inside my LAN, however I need it to accept print jobs from the internet (both from another home and from a Python script running in an ...
0 votes
1 answer
112 views

How to reach "WAN SIDE" of my lan

maybe this is a silly question and the answer is simple. I set my router DMZ (zyxel router) to my dev server (Dns updated dynamically) and everything works good from outside my network. From inside my ...
0 votes
0 answers
1k views

How can I open a port on my public IP with my router?

I am trying to port forward a port on my IP. Unfortunately, my router (Sagemcom F@st 5657 interface) only lets me open ports on my private IP, which is useless if I want to connect from other ...
0 votes
0 answers
168 views

Why my server isn't accessible from outside?

I'm trying to make a Minecraft server. It works fine in LAN but my friends cannot access it outside of my LAN. I tried port forwarding (TCP/UDP 25565) but it didn't work. I turned off the windows ...
0 votes
1 answer
221 views

Disable internet access to untrusted devices?

I have a few devices in my network which have outdated firmware and I would like to make sure that they cannot communicate with the Internet. My plan is to include a second router and build a DMZ-like ...
0 votes
2 answers
5k views

DMZ Host on a router stopped working

I have a U.S. Robotics router, on which there is a DMZ Host configured. DMZ Host's IP is 192.168.1.115, which is the IP of a machine I would like to open to the Internet. This machine is connected ...
0 votes
1 answer
157 views

FireZilla Ftp server Cant Connect externally [duplicate]

I have an FTP server issue and I think that the main problem is my router. The facts: A) Main desktop Windows 10 with IIS server which has a website and a Microsoft SQL server Static Ip 192.168.1.100 ...
0 votes
1 answer
689 views

Can I use the ISP modem/router as only a modem? and LAN-to-WAN to another modem/router?

My ISP forces us to use their modem/router. The provided modem/router is a custom NETGEAR VEGN2610 Telco gateway. I want to manage my LAN, WiFi & QoS using my previous modem/router: a D-Link DVA-...
0 votes
1 answer
118 views

DMZ how it works

I am very novice in Networking so hear me out please. I plan to setup the DMZ in my router and expose my CCTV Camera so it is accessible over the internet. My question is the DMZ not inside the ...
0 votes
2 answers
1k views

Router serving as DMZ host at the same time

My Linksys EA6700 wireless router supports DMZ. To configure DMZ I need to specify a DMZ host. As far as I understand, the DMZ host is a server which can be accessed from the Internet. As I have a ...
1 vote
1 answer
3k views

DMZ and 2nd router

I have an ISP provided router modem (BT Smart Hub TypeA) that everyone at home connects to (wifi and cabling) and I want to leave this as is, so it remains as the DHCP, using 192.168.0.x/255.255.255.0 ...
0 votes
0 answers
690 views

Port forward or DMZ not working on tp-link archer a7 ac1750

i have minecraft server on a old pc with debian, portforward in the router doesn't work i also tried DMZ but not works, 2 months ago port forward works, today i changed my lan ip address and subnet ...
3 votes
0 answers
185 views

Trying to run a local server with port forwarding behind a carrier grade network from ISP, but getting no connection with localhost

i'm trying to make a half life server by portforwarding trought my router. It didn't work, i checked it out, and my public IP and my WAN IP were different, then i realised that i was in a carrier ...
4 votes
2 answers
12k views

Difference between DMZ and VLAN

I would like to know the difference between a DMZ and a VLAN (either a private or community VLAN). It would be wonderful if you could help me out! Thanks in advance!
1 vote
1 answer
1k views

Should I use DMZ for a public NextCloud server hosted on a home network?

I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
1 vote
0 answers
2k views

DMZ to another router for WAN IP

I have 2 ISPs (One I am getting rid of -- Bell Canada). The first provider is Bell Canada and they use PPPOE and is connected via DSL and it's a modem/router in one. The second provider is Rogers ...
0 votes
0 answers
759 views

OpenVPN server on DMZ router

I am stuck with the ISP modem/roter and I want to use a second router with VPN capabilities, but I cannot get the OpenVPN server to work. Please do not suggest to put the first router as bridge as I ...
1 vote
0 answers
317 views

DMZ vs Port Forwarding

We're a medium sized company and working with a vendor who requires us to set up a server. The connection to this server is from a list of fixed IP addresses in the cloud. They have only required the ...
0 votes
0 answers
539 views

DMZ (Portforwarding) in OpenVPN

I am running an self-hosted openvpn server with few clients. I want to expose 1 client to the external network, how can I do that? I see similar option in paid admin panel, but I'm using the free ...
2 votes
0 answers
246 views

Pass port traffic from home router > pfsense VM > gaming server

I want to setup a gaming server on a physical host I have at home. I am having trouble passing traffic through my home router to the pfsense VM, to the gaming host. My network looks like this: Home ...
1 vote
1 answer
41 views

DMZ Network terming confusion [closed]

I have a question regarding the correct term and meaning of a DMZ network. We have in our company the following network stack: Internal Clients network 192.168.0.0/24 we call it company LAN Server ...
4 votes
2 answers
9k views

External ping fails on Linksys router

When I try to ping my server from somewhere other than my local network, if finds the host, but returns as a lost packet. Screenshot from http://tools.pingdom.com: http://cl.ly/1I1c3K0z3Y1I2c3x3R3Z ...
2 votes
0 answers
1k views

DMZ forwarding on Cisco DPC/EPC2100 Cable Modem to Linksys Router for IP Cameras

I have one of the old Cisco DPC/EPC2100 Cable Modems and wanted to know if anyone has had any luck setting up DMZ on it? Link to modem: http://www.cisco.com/web/consumer/support/modem_DPC2100.html ...
1 vote
0 answers
981 views

How can I determine who is blocking port 25 from the internet?

I'm flummoxed. I've bought a domain name through 'freehostia.com' - and I've setup the MX records to point to my DDNS based local SMTP/POP3 server which I'm running on a Synology NAS box. I've ...
28 votes
4 answers
186k views

What's DMZ used for in a home wireless router?

As far as I understand, by using DMZ you expose all of the host computer's ports to the Internet. What's that good for?
0 votes
1 answer
16k views

DMZ vs Port-Forwarding [closed]

In some ISP(s) new routers the DMZ option is absent In this cases I sometimes solve the problem Redirecting all ports (1-65535) as VirtualPorts to the intended DMZ machine (Port-Forwarding) What ...
0 votes
1 answer
243 views

Why can't I reach SSH from my public IP but random hacker-bots can?

I have a Raspberry Pi3 with Raspbian Stretch that is behind a home router. /var/log/auth.log in the RPi consistently shows failed login attempts with generic usernames (root, operator, webmaster, and ...
2 votes
0 answers
517 views

separating two networks with DMZ?

I am a college student wanting to get into server and networking but I have an issue I need help with at home. I asked a question about a year ago about creating two separate networks with the same ...
2 votes
1 answer
5k views

Allow access from outside network with dmz and iptables

I'm having a problem with my home network. So my setup is like this: In my Router (using Ubuntu desktop v11.04), I installed squid proxy as my transparent proxy. So I would like to use dyndns to ...
1 vote
1 answer
1k views

Does DMZ direct traffic to its target even if initiated by another computer inside LAN?

Suppose my setup looked like this: Router 1 connects to the Internet (i.e. the modem). Router 2's WAN port connects to a LAN port of Router 1. (I.e. Router 2 is a 'router behind router' with its own ...
0 votes
1 answer
243 views

Single-sign-on in DMZ / OpenLDAP

we have a dmz with several https-based services, which users from internal network use although as users from outside. To ensure authentification with the active directory user-credentials, we set up ...
0 votes
0 answers
1k views

DMZ to LAN. SMB Print and File Sharing not working

I have a Windows Server 2008 r2 machine on DMZ. We have a shared folder on there that one day a couple weeks ago was no longer able to be accessed. No changes occurred except for maybe windows ...
0 votes
1 answer
168 views

App having access to dynamic IP DMZ host in home network

I have a set of Dahua home cameras connected to my home network. The router is one provided by my ISP. Now after creating on the router a DMZ host from the cameras' recorder I am able to get live ...
1 vote
1 answer
377 views

Can I setup one router (modem) for ethernet internet only and another router for Wifi only on the same network?

The Goal: To be able to only turn on the WiFi only when we need it while having continuous access to internet via ethernet (hard-wired). I've found a Bluetooth controlled outlet that I can plug the ...
1 vote
2 answers
3k views

Home network: DMZ or not?

Router: Asus RT AC-66U Setup: Router, IP 10.0.0.1 Apache2 server, IP 10.0.0.2 Clients etc., IP 10.0.0.X Virtual servers: All traffic on port 80 forwarded to 10.0.0.2, port 80. Pretty simple setup. ...
3 votes
2 answers
238 views

Is a forwarded port vulnerable to exploit if there is no software listening for connections on that port?

Does forwarding a port to a device (or DMZing the device) mean the device is susceptible to prodding on the opened ports even if no software listening to those ports is running on the device? e.g.: ...
0 votes
0 answers
46 views

Setting up honeynet behind DSL router

I have setup double honeynet for capturing polymorphic worms as shown in the figure. The whole setup is in Virtual environment on a single host. I want all the traffic to reach the internal router ...
-1 votes
2 answers
2k views

DMZ - Active Directory - (Philosophy)

I have searched all over and found a lot of different answers to my question with no real direct Yes or No. I made a very crude network diagram to explain what I would like to setup. I have setup a ...
0 votes
0 answers
2k views

cannot access my web server after setting up a DMZ with my mobile broadband router

I am trying to open my web server to the internet in order to give some friends a view on my on-development websites. Since I gave up trying with the port forward way (my ISP is probably not allowing ...
1 vote
2 answers
7k views

SSH (sftp) Server - DMZ or Port Forwarding?

I run an SSH server on my main machine. What are the security risks here, and advantages/disadvantages to port forwarding or a DMZ? Also, is there a way to tunnel an SSH server without making changes ...