I build a home server with Xampp. When route my local ip addres with NAT there is virtual server and DNZ. If I only full fiel virtual server my http port not opens.if I enable DNZ then I can reach my server from internet.But should I open all of this? are they will cause any security problem?and how can I solve this problem?
closed as off-topic by Falcon Momot, MDMarra, Ward, Bryan, Scott Pack Jul 6 at 12:59
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions about hardware or software used in a home setting are off-topic because they require answers that may not be practical for the business and support professionals here. You should try asking on Super User instead." – Falcon Momot, MDMarra, Ward, Bryan, Scott Pack
Opening a small server to a DMZ connection is not recommended at all. Yes, that would open it up to security vulnerabilities.
The best way of doing this is to discover the specific ports and protocols that your server needs to use, and create port-forward or virtual server rules to just allow those ports to go out.