In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

1
vote
1answer
17 views

How to make Docker resolve DMZ host?

Imagine I have this setup: An application server Private IP: 1.0.0.1; Private hostname: machine1.internal.domain Public IP : 2.0.0.1; Public hostname : machine1.example.com A ...
0
votes
0answers
4 views

I am not able to connect my software with my public IP [migrated]

please help me in port forwarding. i m stuck in the middle. suppose my local ip is - 192.168.0.103 and public ip is - 49.248.xx.xxx I have D-link DSL-2520U ADSL2+ modem router so here is what i do, i ...
0
votes
0answers
24 views

Windows RODC/DMZ connection to trusted AD issue

I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
0
votes
0answers
11 views

Vlan need to reach server from ouside with public ip

My primary goal is to have number on server in vshpere that are located in one vlan that is nor reachable for other vlans in my network. Finaly i must reach server from outside by public ip (winbox ...
2
votes
1answer
27 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every ...
1
vote
1answer
40 views

adfs proxy and dmz configuration

I am trying to setup an ADFS proxy in a DMZ as per Microsoft's best practices, but do not really understand how this is done practically. The basic premise is that a server is placed in the DMZ and ...
0
votes
1answer
43 views

When I ping local IP address I get a reply from external IP

I have SonicWall NSA 2400. Port X2 is WAN port with following settings X.X.X.250 / 255.255.255.248. I connected VPN concentrator to port X5, which is assigned to DMZ zone in Transporarent IP Mode for ...
0
votes
0answers
41 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
1
vote
0answers
100 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
1answer
286 views

Run Service Control (sc.exe) command on secure port

Our team runs the following commands to turn on and off Windows Services (e.g. JBoss Native) from the Windows command line as well as through source code in a program. It connects to a remote box. ...
2
votes
3answers
171 views

Allow internal DNS to be queried from the DMZ?

We have a mail gateway running in a DMZ, which is a relay for our internal mail server holding all the mail. We have come accross the need to use DNS from the DMZ to resolve names of internal services ...
0
votes
1answer
94 views

Virtual web server configuration dmz [closed]

I have 2 rx300 server with Esxi and I want to use one of these as web virtual server with 2 VM running: - Mail server - WEB server for enterprise website and ecommerce. the esxi server has an iscsi ...
2
votes
1answer
640 views

Active Directory member servers in the DMZ [duplicate]

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
1answer
217 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
0
votes
0answers
206 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
1
vote
0answers
262 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
2
votes
3answers
199 views

WinRM Publicly Available

I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or ...
3
votes
1answer
2k views

Disable EdgeRouter Lite GUI on DMZ interface

I'm using the Ubiquiti EdgeRouter in a SOHO network. I've configured it using the "WAN+2LAN2" wizard, without bridging the LAN ports. This sets up the three port router with eth0 assigned to the ...
0
votes
0answers
120 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
-1
votes
1answer
348 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
1
vote
1answer
800 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
1answer
81 views

Domino web server config

I am configuring a Domino web server. I have configured it as follows: Web server has no connection to admin server. Connections are initiated by the Admin server. Admin server has a connection ...
0
votes
1answer
603 views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
1
vote
1answer
653 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
0
votes
2answers
716 views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
-1
votes
1answer
52 views

Access 2 Hosts from Internet on same subnet [closed]

Hi I have 2 raspberry PI in my network. And I want both of them accessibles from the internet. Right now I have a DMZ from you can access one with NO-IP setup: www.blabla.no-ip.org ----->DMZ ...
1
vote
1answer
140 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
1
vote
1answer
632 views

The best approach to access server in DMZ (outside domain) from LAN via command line (MS Windows)

I have two servers: SVR1 (Windows Server 2008) in LAN - part of domain SVR2 (Windows Server 2008) in DMZ - workgroup I need to access SVR2 from SVR1 via command line batch - copy some files and ...
1
vote
1answer
495 views

CRM 2013 Internet Facing Deployment (IFD)

For previous CRM IFDs I have placed the CRM Front End server in the DMZ along with an ADFS Proxy and allowed access from the Domain Controller to the CRM Front End through the firewall. This is ...
0
votes
1answer
63 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
0
votes
4answers
332 views

Best Method to test Opened Ports [closed]

We have a requirment where in we have to test 500+ Port opening rules. So requires a suggest on below points. Which is the best tool to test the connectivity of the ports. Telnet will be sufficient ...
-1
votes
2answers
61 views

Multiple non-http services, 1 static IP [closed]

I have an issue where we have several non-http(s) services which we would like to access from across the WAN. SSH is a primary protocol we'd be using, FTP as well. Here's how things are laid out. We ...
7
votes
2answers
2k views

Distinction between an extranet and a DMZ

I've been reading about intranets, extranets, DMZs and VPNs now, and I'd need some clarifications related to extranets and DMZs. I understand that they are different types of concepts - extranet ...
0
votes
2answers
445 views

How to use single public IP to access multiple application servers in SAP?

Scenario I have: Wireless D-Link Router Connected to the Internet Two IBM-Lenovo Servers Connected( Wireless/Wired) to the Router Two servers have IP addresses : 192.xxx.xxx.123 and ...
0
votes
1answer
3k views

Error connecting to sql server database when running IIS from DMZ

I've been working on this for a few days now. One of our clients has a 3 tier server plan - an IIS server, an application server (where the Asp.Net MVC3 application is located) and the db server. All ...
0
votes
1answer
418 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
0
votes
1answer
4k views

Can't establish a reliable VPN tunnel (ShrewSoft client / ZyWALL USG-50 firewall)

I try to setup an IPSec VPN tunnel through my firewall (ZyWall USG-50), but it doesn't work like it should. quick scheme of my installation: ME [A.B.C.D] --- **INTERNET** | ...
2
votes
0answers
3k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
0
votes
2answers
257 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
1
vote
1answer
241 views

Firewall setup Huawei 4G with DMZ

Network topology: ISP1 | | Alternative ISP 4G | | | Huawei 4G with DMZ | | ...
0
votes
1answer
186 views

2 NIC vs NAT for exposing server

I'm trying to virtualize some applciation using Citrix. so I have to expose the Citrix Secure Gateway to Internet (put it in DMZ). my question is which is better practice ? using 2 physical NIC, ...
0
votes
1answer
220 views

LAMP server kerberos config to authenticate against a read only Windows KDC in a dmz

Background: We have a number of AD networks (domains) that are connected through VPNs and have established AD trust relationships. We have an externally hosted web server and have configured ...
0
votes
1answer
402 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
0
votes
1answer
57 views

OpenSuSE server in demilitarized zone can still ping internal network?

I don't know much about setting up DMZ but from what I read in the OpenSUSE docs, putting a network interface in the DMZ zone allows reaching it from both external and internal networks while ...
1
vote
1answer
3k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
2
votes
1answer
67 views

Web server with access to internet and internet Active Directory [closed]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
94 views

Managing ServerCore 2008 R2 in DMZ

I am looking to replace our DMZ servers with Server Core editions but am struggling with remote management. The computers in the DMZ are in a workgroup while the client I am connecting from is on our ...
0
votes
3answers
242 views

Is it a good idea to only allows connections to be established in the LAN->DMZ direction?

I'm trying to setup the usual thing, with a DMZ containing servers that can be accessed from the internet, and a LAN that should be as secure as possible. I happen to also have total freedom on the ...
1
vote
1answer
492 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
0answers
317 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...