In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...
1
vote
1answer
34 views
iptables: Allowing only established outgoing connections like DMZ
I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own.
I would ...
0
votes
0answers
16 views
Proxy DMZ server to bounce data between sql server and clients
Is this feasible?
I have a sql server that is setup behind a corporate firewall. I have clients that need direct connection to that sql server via ODBC. Instead of punching holes in the firewall I ...
0
votes
2answers
42 views
Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface
As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
0
votes
0answers
22 views
SSTP VPN client cannot access internal network with window server 2012 RRAS server
i have face some trouble to access my company internal network using external client via SSTP VPN setup with window server 2012 RRAS.
i have successfully connect my client to RRAS server, but when i ...
0
votes
0answers
29 views
set DMZ server on modem that not support DMZ, using port forwarding
I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
1
vote
1answer
54 views
When moving a server from behind a firewall into a DMZ, should you move a test server first? [closed]
We have to move a server from within the firewall to a DMZ (not a true DMZ, but a space that's between 2 firewalls. Is it typically a good idea, when moving a server in this fashion, to stand up ...
0
votes
2answers
58 views
Implement a new dns server in a DMZ
I currently have a few Dns servers (ad Integrated). Internally we are using domain.local and one ISA server running DNS domains domain.com and some other .com domains.
I have one server that is an ...
0
votes
2answers
132 views
how to route external IP to internal without MASQUERADE
Ok, i'm still working on creating a dmz'd http server
So now I have an ethernet tunnel using ssh -w 0:0 and I have interfaces on each end which can talk to each other:
previous question
So now ...
0
votes
0answers
40 views
connecting an ip on the remote machine via layer 2 to local machine
Ok, so this is part two of my main question:
So I have an ssh -w ethernet tunnel established.
previous question
run-setup:
source ./HOST
scp -i green.pem server/* root@$HOST:
ssh -i green.pem ...
3
votes
1answer
113 views
Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?
I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
1
vote
1answer
104 views
Moving uploaded files through a DMZ
I'm transitioning a web app (runs on LAMP) from a single host to a configuration with the php/apache app running on a public facing server in a DMZ. The app connects to mysql which is sitting in a ...
0
votes
0answers
56 views
Using the DMZ to connect to another LAN - Cisco RV082
I want to use the WAN2 port in DMZ mode on my RV082 router. I want to connect this to another router which will go to another network.
So it will look like this:
So if you are on LAN1, you can go ...
1
vote
1answer
141 views
DMZ config on RV082 router
We are connecting 2 offices with a dedicated point to point connection. Both offices have the Cisco RV082 router. In both offices, the routers are being used for internet on the WAN1 port. This ...
0
votes
1answer
71 views
SMB for specific user from DMZ to internal
I've got one server in a DMZ which has limited access via SMB to another one in the internal network. A web server on that external machine needs access to a whole partition on that internal server.
...
1
vote
1answer
246 views
Subversion server behind firewall and Apache reverse proxy exhibits intermittent hanging
Here's my situation:
1) DMZ: I have an self-signed SSL Cert on an Apache server (our bastion host) configured to run as a reverse proxy for 7 other LAN servers (subversion, ldap, jenkins, ...
0
votes
1answer
322 views
Where to put OpenVPN server - DMZ or LAN?
We have a Smoothwall firewall with both a "green" network (LAN) and an "orange" network (DMZ), and we would like to use OpenVPN access server as our VPN server.
The question is: Should the VPN server ...
0
votes
0answers
357 views
Setup DMZ in Pfsense with virtual servers, physical Pfsense server
I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like:
Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
0
votes
0answers
338 views
forward proxy (squid) placement: LAN or DMZ? [closed]
some HOWTOs and manuals suggest to install a forward proxy in DMZ and some advice to place it in LAN.
The forward proxy doesn't offer anything to the internet users, it could not be directly attacked ...
0
votes
1answer
233 views
VLAN security compared to DMZ
I found this question very illuminating about DMZs and when to place a server in one.
We're re-organizing our internal company network (keeping the same external IPs and domains), our mainly Windows ...
2
votes
0answers
100 views
Deploying a ASP.Net WebAPI website and DMZ
I have a set of RESTful services developed using ASP.Net WebAPI which is a single project. I handle authentication via ASP.Net's built in Forms Authentication (cookie based) mechanism which is also ...
0
votes
2answers
48 views
Google Analytics: No stats from DMZ network segment
We need to track hits on a particular page for usage stats, evaluate client need, etc.
More specifically we need to track an internal DMZ network segment for hits on this page. Google Analytics ...
0
votes
0answers
170 views
Internal but no external Citrix Access?
We recently had to reload our configuration of Citrix on our server Server1, and since we have, we can access Citrix internally, but not externally. Normally we access Citrix from ...
1
vote
1answer
181 views
Servers in DMZ will not communicate with each other
(Full disclosure: I rate barely above "noob" when it comes to networking.) My workplace recent got a new web server. Since we're nearing the end of an overhaul of our website, we're doing a slooooow ...
0
votes
1answer
418 views
Cisco adaptive security appliance is dropping packets where SYN flag is not set
We have an apache instance sitting inside our DMZ which is configured to proxy requests to an internal NATed tomcat instance inside our network. It works fine, but then all of a sudden requests from ...
2
votes
1answer
364 views
How to Deploy an ASP.NET Web API- and Browser-based Application to a Production Environment [closed]
(Please forgive if this is posted in an incorrect forum. We didn’t know exactly where to post it.)
We have an ASP.NET Web API single page application - a browser-based app running in IIS to serve up ...
1
vote
1answer
63 views
API exposing services running on LAN to serve website in DMZ
I have a team of developers who are writing both an intranet and external website.
The website consists of two servers and a load balancer, inside a DMZ.
The DMZ has a pinhole open to the LAN ...
0
votes
2answers
80 views
Do I need to place a physical server/host within the DMZ to host servers/applications?
We are moving to a new office, and part is to review our current LAN/WAN and server access to/from the web.
I understand how the DMZ works, but can't figure out if I need a physical server/host to be ...
1
vote
2answers
214 views
Linux - Get Outbound/Inbound Traffic by IP address
I am hosting a website and I found that the traffic on my server is quite high.
My Linux server is behind a router in a DMZ. I would like to see the traffic made on my Linux box on the eth0 ...
0
votes
0answers
93 views
Sonicwall TZ150 paired with Netgear Router
This is experimental and really just a learning process at the moment but I'm keen to see if I'm on the right track!
Essentially I have a Netgear DG834G, which as of now, has 3 clients connected to ...
1
vote
0answers
239 views
How to configure totally open DMZ with OpenWRT?
I have OpenWRT router.
I have NAS in my LAN, which i need to access from WAN and from all computers in the LAN. So, it should be accessible from any computer and it needs to access some of them, too.
...
3
votes
1answer
69 views
How can I tell if a host is bridged and acting as a router
I would like to scan my DMZ for hosts that are bridged between subnets and have routing enabled. Since I have everything from VMWare servers, to load balancers on the DMZ I'm unsure if every host is ...
3
votes
1answer
426 views
How to place a virtual machine in DMZ?
I have an Ubuntu 12.04 server running few virtual machines with KVM.
I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products ...
7
votes
4answers
243 views
Security for university research lab systems
Being responsible for security in a university computer science department is no fun at all. And I explain: It is often the case that I get a request for installation of new hw systems or software ...
2
votes
1answer
204 views
Best practices for LDAP and DMZ
We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
0
votes
0answers
76 views
How to expose SQL-data to public webservices?
I'm aware of several questions not unlike this one (example), but I would like to see if anyone has any strong feelings about this.
We're a fairly small application service provider. Citrix, Windows, ...
2
votes
2answers
301 views
Internal traffic card and external traffic cards on the same server… how to configure?
This might sound like a noob question, but here is what I have to configure:
FreeBSD
1 server with 2 network cards
1 network card for internal IP addresses (5 of them)
1 network card for external IP ...
0
votes
0answers
99 views
VPN Redundancy - One NIC with two DMZ IPs or Two NICs each with a DMZ IP address
Currently, I have setup on NIC card with two DMZ IP addresses. We are having weird issues with the connection, where sometimes servers aren't accessible.
I have another NIC card other than the ...
0
votes
1answer
103 views
Centralizing our FTP processes via an SFTP server in our DMZ
We have a number of various FTP processes, running on various internal servers, that connect with outside vendors to send or receive sensitive data files. As such, we don't have one centralized place ...
0
votes
0answers
117 views
Where can I find network diagram/tutorials for showing web service on DMZ connecting to internal web service
I need to create a WCF Webservice on my internal network that will connect to our database. After implementing that, I want to utilize that same service to retrieve data externally. My manager and ...
0
votes
0answers
278 views
Fortigate - Accessing a Virtual Server address from several interfaces
I am setting up a new application in its own DMZ on our Fortigate 300C firewalls. I have defined a load-balancing configuration for part of the application, and this works fine for traffic coming in ...
0
votes
0answers
75 views
Production windows web servers in AD with the rest Network and users
We have 8 Web servers accessible from Internet and 2 SQL Servers accessible from those 8 servers.
What is better:
a) Put them all in AD in which other users are (entire company), the connection ...
0
votes
1answer
456 views
Giving a VM access to a physical NIC on the host
I am running VMware Server 2.0.2 with 2 VM's. One of the VM's I want to have bridged with the domain/primary NIC of the host which I have done successfully. I want the other VM to have access to only ...
0
votes
0answers
74 views
NTLMv2 breaks when IP address is NAT'd
I have a Netgear ReadyNAS system outside my network that needs to authenticate users via a ADSI (similar to LDAP but over NTLMv2 RPC). The NTLMv2 protocol really doesn't like it when I put the domain ...
4
votes
1answer
1k views
DMZ Setup with two firewalls - Traffic from DMZ to LAN and LAN to DMZ
I am setting up a network with machines that need to be accessible from the internet. I'm planning on putting these in a DMZ. Some of the machines in the DMZ need access to machines on the private ...
0
votes
2answers
506 views
Reverse Proxy - should it be a different technology stack?
Got a skeptical question about a reverse proxy setup I'm considering.
I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
2
votes
1answer
325 views
Howto maximize utilization of assigned subnet block for DMZ
I'm part time sysadmin for a small hosting company with currently 20 different public servers. We have a 27 subnet block that gives us a maximum of 30 usable IP addresses. That much I know, but how do ...
0
votes
1answer
1k views
Fortigate 40c Firewall Configuration
Does anybody know if is it possible to Un-bridge ports on forgiate 40c?
I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
1
vote
4answers
606 views
Looking for low cost VPN/DMZ solution [closed]
I am looking to set up a VPN and DMZ solution for a small business. Here is some background and some of their requirements:
The is a small business with maybe a dozen servers and another half-dozen ...
0
votes
1answer
2k views
Fortigate Firewall - DMZ vs Interface ports
I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf)
Till now the two servers ...
4
votes
1answer
185 views
Backing up a server on the DMZ
We have a somewhat-static web app with a large amount of media files that runs on a 2008 R2, non-domain server on the DMZ. I need to backup the media files on the server. The current backup mechanism ...
