Questions tagged [dmz]

In computer security, a DMZ (demilitarized zone) is a physical or logical sub-network that contains and exposes services to a larger untrusted network (usually the Internet).

Filter by
Sorted by
Tagged with
28 votes
4 answers
186k views

What's DMZ used for in a home wireless router?

As far as I understand, by using DMZ you expose all of the host computer's ports to the Internet. What's that good for?
guillermooo's user avatar
  • 2,143
9 votes
4 answers
6k views

Would you setup a DMZ at home?

From a security point of view, what are the benefits of going the whole hog of setting up a DMZ at home if you plan on running a low traffic (unpopular) website from there? There are a number of ...
Rob G's user avatar
  • 229
4 votes
4 answers
15k views

How to expose a home PC behind CG-NAT using a VPS?

Previously I had my home workstation PC directly exposed to the internet simply by setting it as the DMZ PC in my router's settings, and I could access any services I was running on it: SSH, Web ...
MestreLion's user avatar
  • 2,657
4 votes
2 answers
12k views

Difference between DMZ and VLAN

I would like to know the difference between a DMZ and a VLAN (either a private or community VLAN). It would be wonderful if you could help me out! Thanks in advance!
Blackd00r's user avatar
4 votes
2 answers
9k views

External ping fails on Linksys router

When I try to ping my server from somewhere other than my local network, if finds the host, but returns as a lost packet. Screenshot from http://tools.pingdom.com: http://cl.ly/1I1c3K0z3Y1I2c3x3R3Z ...
sman591's user avatar
  • 235
4 votes
2 answers
5k views

Asus router RT-N56U unnecessarily opens extra ports for a DMZ device

My Asus RT-N56U router (latest firmware 3.0.0.4.374_979) opens port UDP 3659 for a Playstation 3 which is already in DMZ. The DMZ was set up properly with a static IP assigned to the PS3 and the ...
Z.Zen's user avatar
  • 91
4 votes
1 answer
1k views

Configuration of DMZ on LRT214

I want to learn more about network technology. Therefore I want to run a raspberry pi in the DMZ as a web server. What is working: Appache Server on the pi is working. When I use it in the LAN and ...
BerndGit's user avatar
  • 249
3 votes
2 answers
19k views

Do I need to port forward if I'm using a DMZ?

It seems like if I set a computer up as a DMZ to host, say, a Minecraft server, then I'd still need to port forward. Otherwise how will the router know which local computer to send them to when they ...
David Bandel's user avatar
3 votes
2 answers
238 views

Is a forwarded port vulnerable to exploit if there is no software listening for connections on that port?

Does forwarding a port to a device (or DMZing the device) mean the device is susceptible to prodding on the opened ports even if no software listening to those ports is running on the device? e.g.: ...
Rudy's user avatar
  • 177
3 votes
3 answers
8k views

How come I can't ping my home computer?

I'm trying to set up a vpn into my home computer in order to access files from wherever. I have the home computer set up with a no-ip dynamic dns program so I can always connect, and have also tried ...
bikefixxer's user avatar
3 votes
1 answer
3k views

Is it safe to add a router to a modem without bridge mode by using DMZ?

I cannot alter my modem firmware and there's no legal way to enable bridge mode. I want to add a router so that I can have complete control over the network. If I use DMZ to achieve this, how secure ...
user avatar
3 votes
1 answer
18k views

How to setup Home Networking DMZ Using Two Routers

I decided to get a better router than using my ISP supplied modem/router.  Thus I am not interested in using my new router as access point nor bridge mode.   I prefer having two internet accessible ...
Kim Steve's user avatar
3 votes
0 answers
185 views

Trying to run a local server with port forwarding behind a carrier grade network from ISP, but getting no connection with localhost

i'm trying to make a half life server by portforwarding trought my router. It didn't work, i checked it out, and my public IP and my WAN IP were different, then i realised that i was in a carrier ...
João Peterson Scheffer's user avatar
2 votes
1 answer
15k views

Samba - Access shares from internet

I've added my computer to my router's DMZ so all opened ports are accessible from the internet. I have a couple of Samba shares that currently have public read permission. I want all other computers ...
goocreations's user avatar
2 votes
1 answer
605 views

Working with VLANS

So I recently bought a HP ProCurve (managed) switch to start messing around with VLAN's in a lab environment at home. I have a basic VLAN configured, two machines connected to the VLAN on 192.168.1.10 ...
PnP's user avatar
  • 953
2 votes
1 answer
9k views

Two playstations on one network

In my house I have 2 playstations. My wife and I both play together. On all sort of games but mostly on call of duty. Recently we have been playing Black Ops 3 and have been having problems. We have ...
kid622's user avatar
  • 21
2 votes
1 answer
7k views

Isolate one computer on the LAN from all other computers on the LAN

I would like to know how I can best and most readily set up a single PC on my network such that it cannot see any of the others PCs or access any of their resources. The PC must still be able to ...
Gork's user avatar
  • 23
2 votes
1 answer
2k views

DMZ server with a public IP

So, I'd like to run a L4D2 game server on a VM. Partially for playing and partially for training. This is a simple residential network with a DSL modem and a E4200 router (for now). The router uses ...
UndeadBob's user avatar
  • 238
2 votes
2 answers
1k views

How is an Exchange server supposed to be seen on the perimeter network?

I have done a lot of research and I think I am on a good track, finally. I have been searching for days. I am not even sure if this is a good forum to ask this question, but all the other forums I ...
Daniel's user avatar
  • 23
2 votes
0 answers
246 views

Pass port traffic from home router > pfsense VM > gaming server

I want to setup a gaming server on a physical host I have at home. I am having trouble passing traffic through my home router to the pfsense VM, to the gaming host. My network looks like this: Home ...
Paul Hill's user avatar
2 votes
0 answers
517 views

separating two networks with DMZ?

I am a college student wanting to get into server and networking but I have an issue I need help with at home. I asked a question about a year ago about creating two separate networks with the same ...
Josiah Christiansen's user avatar
2 votes
0 answers
1k views

DMZ forwarding on Cisco DPC/EPC2100 Cable Modem to Linksys Router for IP Cameras

I have one of the old Cisco DPC/EPC2100 Cable Modems and wanted to know if anyone has had any luck setting up DMZ on it? Link to modem: http://www.cisco.com/web/consumer/support/modem_DPC2100.html ...
Wasabi Developer's user avatar
2 votes
1 answer
5k views

Allow access from outside network with dmz and iptables

I'm having a problem with my home network. So my setup is like this: In my Router (using Ubuntu desktop v11.04), I installed squid proxy as my transparent proxy. So I would like to use dyndns to ...
Ivan's user avatar
  • 169
1 vote
2 answers
3k views

Home network: DMZ or not?

Router: Asus RT AC-66U Setup: Router, IP 10.0.0.1 Apache2 server, IP 10.0.0.2 Clients etc., IP 10.0.0.X Virtual servers: All traffic on port 80 forwarded to 10.0.0.2, port 80. Pretty simple setup. ...
knoten's user avatar
  • 123
1 vote
3 answers
4k views

Trying to chain 4 routers together.. possible?

I have comcast 50mb internet and 3 other routers that I am trying to connect throughout my duplex house. I am running 50 ft cat5 cables to them throughout the house and have them powered on and ...
Mike's user avatar
  • 11
1 vote
2 answers
2k views

Can a server in a DMZ pose a security risk to the rest of the network?

I'm on the road a lot for work so and I was thinking I might take an old laptop and set up some VM labs to play around with on it that I can access when I'm away from home. It would just be a ...
Kefka's user avatar
  • 1,426
1 vote
2 answers
1k views

Double NATing Issues and DMZ Solution?

I just wanted to put this out there to make sure I am understanding everything correctly around double NATs in an apartment building and if my solution is sound. So I just moved to an apartment ...
Alex's user avatar
  • 27
1 vote
2 answers
7k views

SSH (sftp) Server - DMZ or Port Forwarding?

I run an SSH server on my main machine. What are the security risks here, and advantages/disadvantages to port forwarding or a DMZ? Also, is there a way to tunnel an SSH server without making changes ...
Robot's user avatar
  • 137
1 vote
1 answer
1k views

Does DMZ direct traffic to its target even if initiated by another computer inside LAN?

Suppose my setup looked like this: Router 1 connects to the Internet (i.e. the modem). Router 2's WAN port connects to a LAN port of Router 1. (I.e. Router 2 is a 'router behind router' with its own ...
user avatar
1 vote
1 answer
377 views

Can I setup one router (modem) for ethernet internet only and another router for Wifi only on the same network?

The Goal: To be able to only turn on the WiFi only when we need it while having continuous access to internet via ethernet (hard-wired). I've found a Bluetooth controlled outlet that I can plug the ...
Samuel Stevenson's user avatar
1 vote
1 answer
594 views

Grabbing DHCP from DMZ?

Is it possible to grab DHCP from the DMZ of a router above? Essentially i want to have a setup like this. DMZ DHCP ------> Router (master router) | | ...
sonicboom's user avatar
  • 161
1 vote
1 answer
3k views

Why does my DD-WRT not accept SSH connections from my laptop?

So, here is my system: I have a 2Wire AT&T modem/router which I use for wireless and a Buffalo router flashed with DD-WRT which is physically attached to the 2Wire and set in the DMZ. I set ...
vlsd's user avatar
  • 299
1 vote
2 answers
3k views

Routing from the DMZ to the interior network only

I have a home network connected to Verizon's FIOS service. Verizon's ActionTec router is connected to the ONT via coax to establish the MOCA network. My DD-WRT router's WAN port is connected to one ...
Allan's user avatar
  • 121
1 vote
1 answer
41 views

DMZ Network terming confusion [closed]

I have a question regarding the correct term and meaning of a DMZ network. We have in our company the following network stack: Internal Clients network 192.168.0.0/24 we call it company LAN Server ...
DonMcCoy's user avatar
1 vote
1 answer
792 views

Port 80 forward on home router

I have a generic Linux home router. I can change iptables on it by telnet to console. Currently, it is set up to forward all incoming connections to machine on my internal network, using something ...
Hammad Akhwand's user avatar
1 vote
2 answers
3k views

How do routers avoid port clashes when DMZ and NAT are used?

NAT in consumer routers makes the router translate a request from an internal device on a private IP (say dev0) and a specific source port X to a request from it's own public IP at a different source ...
Simon's user avatar
  • 317
1 vote
1 answer
908 views

SSH to a computer in a DMZ

So here is a rough sketch of what my network currently looks like: From the .2 machine I would like to SSH into my .6 machine, however I am not even able to ping it. This all worked when I was on 1 ...
KDiTraglia's user avatar
1 vote
1 answer
4k views

Can't access DMZ host via public IP within LAN

Recently I replaced my old router with the Linksys E4200V2. I have a personal server, which is a DMZ host in my home network. I can access the server via the public IP of the router, since DMZ is set. ...
Chungmin Lee's user avatar
1 vote
1 answer
3k views

Creating a DMZ with two routers

Hopefully it's okay to post semi-"I am learning" questions on this forum! Basically, I have two routers (both Netgear D834G's) and would like to setup a DMZ at home (merely for learning purposes and ...
PnP's user avatar
  • 953
1 vote
1 answer
3k views

DMZ and 2nd router

I have an ISP provided router modem (BT Smart Hub TypeA) that everyone at home connects to (wifi and cabling) and I want to leave this as is, so it remains as the DHCP, using 192.168.0.x/255.255.255.0 ...
Julian Bennett's user avatar
1 vote
1 answer
1k views

Should I use DMZ for a public NextCloud server hosted on a home network?

I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
user avatar
1 vote
0 answers
2k views

DMZ to another router for WAN IP

I have 2 ISPs (One I am getting rid of -- Bell Canada). The first provider is Bell Canada and they use PPPOE and is connected via DSL and it's a modem/router in one. The second provider is Rogers ...
Brandon's user avatar
  • 175
1 vote
0 answers
317 views

DMZ vs Port Forwarding

We're a medium sized company and working with a vendor who requires us to set up a server. The connection to this server is from a list of fixed IP addresses in the cloud. They have only required the ...
zerose's user avatar
  • 11
1 vote
0 answers
981 views

How can I determine who is blocking port 25 from the internet?

I'm flummoxed. I've bought a domain name through 'freehostia.com' - and I've setup the MX records to point to my DDNS based local SMTP/POP3 server which I'm running on a Synology NAS box. I've ...
Mordachai's user avatar
  • 133
1 vote
1 answer
424 views

Layer-2-Accessible DMZ: ebtables?

I'd like to make a network topology where all the IoT devices (printer, DVR, thermostat, BluRay player, etc) are all in a DMZ and the rest of my devices are all on the LAN. Note that the usage of DMZ ...
iAdjunct's user avatar
  • 1,652
1 vote
0 answers
143 views

NTP not getting through even to DMZ

My home router seems to be blocking UDP 123. sudo ntpdate -u time.apple.com works as expected, but sudo ntpdate time.apple.com I get: "no server suitable for synchronization found" I can get a ...
singpolyma's user avatar
  • 1,059
1 vote
0 answers
76 views

DMZ on a different router

Is it possible to set a second router as a DMZ host? Or is it much simpler to set my webserver as the DMZ host? I'm using two routers on my network and these routers are on different subnets. My ...
Adr's user avatar
  • 111
1 vote
0 answers
1k views

Cisco ASA 5520 as a home router

I have a Cisco ASA 5520 that I recently acquired from work that I am planning to use as my home router. I also have a Linksys E4200 router and a Linksys WRT610N router, both dual-band, that I would ...
reedog117's user avatar
1 vote
2 answers
4k views

Public IP address port forwarding goes to my router's homepage and not my laptop’s server

I am trying to turn my laptop into an internal server to be accessed from anyone on the Internet. But whenever someone types my public IP address into their URL bar it sends them to my router’s config ...
user120404's user avatar
0 votes
1 answer
243 views

Why can't I reach SSH from my public IP but random hacker-bots can?

I have a Raspberry Pi3 with Raspbian Stretch that is behind a home router. /var/log/auth.log in the RPi consistently shows failed login attempts with generic usernames (root, operator, webmaster, and ...
Alexandre Cariage's user avatar