Questions tagged [dmz]
In computer security, a DMZ (demilitarized zone) is a physical or logical sub-network that contains and exposes services to a larger untrusted network (usually the Internet).
94
questions
28
votes
4
answers
186k
views
What's DMZ used for in a home wireless router?
As far as I understand, by using DMZ you expose all of the host computer's ports to the Internet. What's that good for?
9
votes
4
answers
6k
views
Would you setup a DMZ at home?
From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there?
There are a number of ...
4
votes
4
answers
15k
views
How to expose a home PC behind CG-NAT using a VPS?
Previously I had my home workstation PC directly exposed to the internet simply by setting it as the DMZ PC in my router's settings, and I could access any services I was running on it: SSH, Web ...
4
votes
2
answers
12k
views
Difference between DMZ and VLAN
I would like to know the difference between a DMZ and a VLAN (either a private or community VLAN).
It would be wonderful if you could help me out!
Thanks in advance!
4
votes
2
answers
9k
views
External ping fails on Linksys router
When I try to ping my server from somewhere other than my local network, if finds the host, but returns as a lost packet.
Screenshot from http://tools.pingdom.com: http://cl.ly/1I1c3K0z3Y1I2c3x3R3Z
...
4
votes
2
answers
5k
views
Asus router RT-N56U unnecessarily opens extra ports for a DMZ device
My Asus RT-N56U router (latest firmware 3.0.0.4.374_979) opens port UDP 3659 for a Playstation 3 which is already in DMZ. The DMZ was set up properly with a static IP assigned to the PS3 and the ...
4
votes
1
answer
1k
views
Configuration of DMZ on LRT214
I want to learn more about network technology. Therefore I want to run a raspberry pi in the DMZ as a web server.
What is working:
Appache Server on the pi is working. When I use it in the LAN and ...
3
votes
2
answers
19k
views
Do I need to port forward if I'm using a DMZ?
It seems like if I set a computer up as a DMZ to host, say, a Minecraft server, then I'd still need to port forward.
Otherwise how will the router know which local computer to send them to when they ...
3
votes
2
answers
238
views
Is a forwarded port vulnerable to exploit if there is no software listening for connections on that port?
Does forwarding a port to a device (or DMZing the device) mean the device is susceptible to prodding on the opened ports even if no software listening to those ports is running on the device?
e.g.: ...
3
votes
3
answers
8k
views
How come I can't ping my home computer?
I'm trying to set up a vpn into my home computer in order to access files from wherever. I have the home computer set up with a no-ip dynamic dns program so I can always connect, and have also tried ...
3
votes
1
answer
3k
views
Is it safe to add a router to a modem without bridge mode by using DMZ?
I cannot alter my modem firmware and there's no legal way to enable bridge mode. I want to add a router so that I can have complete control over the network.
If I use DMZ to achieve this, how secure ...
3
votes
1
answer
18k
views
How to setup Home Networking DMZ Using Two Routers
I decided to get a better router than using my ISP supplied modem/router. Thus I am not interested in using my new router as access point nor bridge mode. I prefer having two internet accessible ...
3
votes
0
answers
185
views
Trying to run a local server with port forwarding behind a carrier grade network from ISP, but getting no connection with localhost
i'm trying to make a half life server by portforwarding trought my router. It didn't work, i checked it out, and my public IP and my WAN IP were different, then i realised that i was in a carrier ...
2
votes
1
answer
15k
views
Samba - Access shares from internet
I've added my computer to my router's DMZ so all opened ports are accessible from the internet. I have a couple of Samba shares that currently have public read permission. I want all other computers ...
2
votes
1
answer
605
views
Working with VLANS
So I recently bought a HP ProCurve (managed) switch to start messing around with VLAN's in a lab environment at home. I have a basic VLAN configured, two machines connected to the VLAN on 192.168.1.10 ...
2
votes
1
answer
9k
views
Two playstations on one network
In my house I have 2 playstations. My wife and I both play together. On all sort of games but mostly on call of duty. Recently we have been playing Black Ops 3 and have been having problems. We have ...
2
votes
1
answer
7k
views
Isolate one computer on the LAN from all other computers on the LAN
I would like to know how I can best and most readily set up a single PC on my network such that it cannot see any of the others PCs or access any of their resources. The PC must still be able to ...
2
votes
1
answer
2k
views
DMZ server with a public IP
So, I'd like to run a L4D2 game server on a VM. Partially for playing and partially for training. This is a simple residential network with a DSL modem and a E4200 router (for now). The router uses ...
2
votes
2
answers
1k
views
How is an Exchange server supposed to be seen on the perimeter network?
I have done a lot of research and I think I am on a good track, finally. I have been searching for days. I am not even sure if this is a good forum to ask this question, but all the other forums I ...
2
votes
0
answers
246
views
Pass port traffic from home router > pfsense VM > gaming server
I want to setup a gaming server on a physical host I have at home. I am having trouble passing traffic through my home router to the pfsense VM, to the gaming host.
My network looks like this:
Home ...
2
votes
0
answers
517
views
separating two networks with DMZ?
I am a college student wanting to get into server and networking but I have an issue I need help with at home. I asked a question about a year ago about creating two separate networks with the same ...
2
votes
0
answers
1k
views
DMZ forwarding on Cisco DPC/EPC2100 Cable Modem to Linksys Router for IP Cameras
I have one of the old Cisco DPC/EPC2100 Cable Modems and wanted to know if anyone has had any luck setting up DMZ on it?
Link to modem: http://www.cisco.com/web/consumer/support/modem_DPC2100.html
...
2
votes
1
answer
5k
views
Allow access from outside network with dmz and iptables
I'm having a problem with my home network.
So my setup is like this:
In my Router (using Ubuntu desktop v11.04),
I installed squid proxy as my transparent proxy.
So I would like to use dyndns to ...
1
vote
2
answers
3k
views
Home network: DMZ or not?
Router: Asus RT AC-66U
Setup:
Router, IP 10.0.0.1
Apache2 server, IP 10.0.0.2
Clients etc., IP 10.0.0.X
Virtual servers:
All traffic on port 80 forwarded to 10.0.0.2, port 80.
Pretty simple setup.
...
1
vote
3
answers
4k
views
Trying to chain 4 routers together.. possible?
I have comcast 50mb internet and 3 other routers that I am trying to connect throughout my duplex house. I am running 50 ft cat5 cables to them throughout the house and have them powered on and ...
1
vote
2
answers
2k
views
Can a server in a DMZ pose a security risk to the rest of the network?
I'm on the road a lot for work so and I was thinking I might take an old laptop and set up some VM labs to play around with on it that I can access when I'm away from home.
It would just be a ...
1
vote
2
answers
1k
views
Double NATing Issues and DMZ Solution?
I just wanted to put this out there to make sure I am understanding everything correctly around double NATs in an apartment building and if my solution is sound.
So I just moved to an apartment ...
1
vote
2
answers
7k
views
SSH (sftp) Server - DMZ or Port Forwarding?
I run an SSH server on my main machine. What are the security risks here, and advantages/disadvantages to port forwarding or a DMZ?
Also, is there a way to tunnel an SSH server without making changes ...
1
vote
1
answer
1k
views
Does DMZ direct traffic to its target even if initiated by another computer inside LAN?
Suppose my setup looked like this:
Router 1 connects to the Internet (i.e. the modem).
Router 2's WAN port connects to a LAN port of Router 1. (I.e. Router 2 is a 'router behind router' with its own ...
1
vote
1
answer
377
views
Can I setup one router (modem) for ethernet internet only and another router for Wifi only on the same network?
The Goal: To be able to only turn on the WiFi only when we need it while having continuous access to internet via ethernet (hard-wired). I've found a Bluetooth controlled outlet that I can plug the ...
1
vote
1
answer
594
views
Grabbing DHCP from DMZ?
Is it possible to grab DHCP from the DMZ of a router above?
Essentially i want to have a setup like this.
DMZ DHCP ------> Router (master router)
|
|
...
1
vote
1
answer
3k
views
Why does my DD-WRT not accept SSH connections from my laptop?
So, here is my system: I have a 2Wire AT&T modem/router which I use for wireless and a Buffalo router flashed with DD-WRT which is physically attached to the 2Wire and set in the DMZ. I set ...
1
vote
2
answers
3k
views
Routing from the DMZ to the interior network only
I have a home network connected to Verizon's FIOS service. Verizon's ActionTec router is connected to the ONT via coax to establish the MOCA network. My DD-WRT router's WAN port is connected to one ...
1
vote
1
answer
41
views
DMZ Network terming confusion [closed]
I have a question regarding the correct term and meaning of a DMZ network.
We have in our company the following network stack:
Internal Clients network 192.168.0.0/24 we call it company LAN
Server ...
1
vote
1
answer
792
views
Port 80 forward on home router
I have a generic Linux home router. I can change iptables on it by telnet to console. Currently, it is set up to forward all incoming connections to machine on my internal network, using something ...
1
vote
2
answers
3k
views
How do routers avoid port clashes when DMZ and NAT are used?
NAT in consumer routers makes the router translate a request from an internal device on a private IP (say dev0) and a specific source port X to a request from it's own public IP at a different source ...
1
vote
1
answer
908
views
SSH to a computer in a DMZ
So here is a rough sketch of what my network currently looks like:
From the .2 machine I would like to SSH into my .6 machine, however I am not even able to ping it. This all worked when I was on 1 ...
1
vote
1
answer
4k
views
Can't access DMZ host via public IP within LAN
Recently I replaced my old router with the Linksys E4200V2. I have a personal server, which is a DMZ host in my home network. I can access the server via the public IP of the router, since DMZ is set. ...
1
vote
1
answer
3k
views
Creating a DMZ with two routers
Hopefully it's okay to post semi-"I am learning" questions on this forum! Basically, I have two routers (both Netgear D834G's) and would like to setup a DMZ at home (merely for learning purposes and ...
1
vote
1
answer
3k
views
DMZ and 2nd router
I have an ISP provided router modem (BT Smart Hub TypeA) that everyone at home connects to (wifi and cabling) and I want to leave this as is, so it remains as the DHCP, using 192.168.0.x/255.255.255.0 ...
1
vote
1
answer
1k
views
Should I use DMZ for a public NextCloud server hosted on a home network?
I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
1
vote
0
answers
2k
views
DMZ to another router for WAN IP
I have 2 ISPs (One I am getting rid of -- Bell Canada).
The first provider is Bell Canada and they use PPPOE and is connected via DSL and it's a modem/router in one.
The second provider is Rogers ...
1
vote
0
answers
317
views
DMZ vs Port Forwarding
We're a medium sized company and working with a vendor who requires us to set up a server. The connection to this server is from a list of fixed IP addresses in the cloud. They have only required the ...
1
vote
0
answers
981
views
How can I determine who is blocking port 25 from the internet?
I'm flummoxed.
I've bought a domain name through 'freehostia.com' - and I've setup the MX records to point to my DDNS based local SMTP/POP3 server which I'm running on a Synology NAS box.
I've ...
1
vote
1
answer
424
views
Layer-2-Accessible DMZ: ebtables?
I'd like to make a network topology where all the IoT devices (printer, DVR, thermostat, BluRay player, etc) are all in a DMZ and the rest of my devices are all on the LAN. Note that the usage of DMZ ...
1
vote
0
answers
143
views
NTP not getting through even to DMZ
My home router seems to be blocking UDP 123.
sudo ntpdate -u time.apple.com
works as expected, but
sudo ntpdate time.apple.com
I get: "no server suitable for synchronization found"
I can get a ...
1
vote
0
answers
76
views
DMZ on a different router
Is it possible to set a second router as a DMZ host?
Or is it much simpler to set my webserver as the DMZ host?
I'm using two routers on my network and these routers are on different subnets.
My ...
1
vote
0
answers
1k
views
Cisco ASA 5520 as a home router
I have a Cisco ASA 5520 that I recently acquired from work that I am planning to use as my home router. I also have a Linksys E4200 router and a Linksys WRT610N router, both dual-band, that I would ...
1
vote
2
answers
4k
views
Public IP address port forwarding goes to my router's homepage and not my laptop’s server
I am trying to turn my laptop into an internal server to be accessed from anyone on the Internet. But whenever someone types my public IP address into their URL bar it sends them to my router’s config ...
0
votes
1
answer
243
views
Why can't I reach SSH from my public IP but random hacker-bots can?
I have a Raspberry Pi3 with Raspbian Stretch that is behind a home router.
/var/log/auth.log in the RPi consistently shows failed login attempts with generic usernames (root, operator, webmaster, and ...