Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I don't know much about setting up DMZ but from what I read in the OpenSUSE docs, putting a network interface in the DMZ zone allows reaching it from both external and internal networks while restricting it from reaching the internal zone itself. I've just tried this and it appears that I can still ping the internal network from this server even though it's interface is in the DMZ.

share|improve this question

1 Answer 1

Your firewall rules are wrong. Remove the rules allowing traffic to be initiated from the DMZ to your internal network.

share|improve this answer
    
I didn't add any such rules. This is just a virtual server and in yast, I set the interface zone to DMZ. –  Patrick Grimard Apr 19 at 13:06
    
Well then you need to add rules on your network firewall to restrict traffic as you wish. –  EEAA Apr 19 at 13:07
    
Ok, I'll look into that. Thanks. –  Patrick Grimard Apr 19 at 13:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.