Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I don't know much about setting up DMZ but from what I read in the OpenSUSE docs, putting a network interface in the DMZ zone allows reaching it from both external and internal networks while restricting it from reaching the internal zone itself. I've just tried this and it appears that I can still ping the internal network from this server even though it's interface is in the DMZ.

share|improve this question

Your firewall rules are wrong. Remove the rules allowing traffic to be initiated from the DMZ to your internal network.

share|improve this answer
I didn't add any such rules. This is just a virtual server and in yast, I set the interface zone to DMZ. – Patrick Grimard Apr 19 '14 at 13:06
Well then you need to add rules on your network firewall to restrict traffic as you wish. – EEAA Apr 19 '14 at 13:07
Ok, I'll look into that. Thanks. – Patrick Grimard Apr 19 '14 at 13:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.