In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

1
vote
0answers
10 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
0
votes
0answers
22 views

pfsense routing with dmz wan and sonic wall

Pfsense setup: 2 physical NIC's (1 input from modem/ISP, 1 LAN with a lot of vlans and DMZ) Network setup: WAN block from ISP xxx.xxx.xxx.225/28 Modem -> pfsense -> vlan 40 (192.168.40.0/24) ...
1
vote
0answers
57 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
2
votes
3answers
167 views

WinRM Publicly Available

I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or ...
1
vote
1answer
201 views

Disable EdgeRouter Lite GUI on DMZ interface

I'm using the Ubiquiti EdgeRouter in a SOHO network. I've configured it using the "WAN+2LAN2" wizard, without bridging the LAN ports. This sets up the three port router with eth0 assigned to the ...
0
votes
0answers
31 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
-1
votes
1answer
167 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
1
vote
1answer
222 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
0answers
16 views

Icinga two servers LAN/DMZ

I installed Icinga Core 1.11 in LAN and Icinga-Web in DMZ, but now Icinga Classic Interface does not work because it is looking at the local Icinga Core instance. There is a way to use it with a ...
0
votes
1answer
33 views

Domino web server config

I am configuring a Domino web server. I have configured it as follows: Web server has no connection to admin server. Connections are initiated by the Admin server. Admin server has a connection ...
0
votes
1answer
58 views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
1
vote
1answer
218 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
0
votes
2answers
258 views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
-1
votes
1answer
40 views

Access 2 Hosts from Internet on same subnet [closed]

Hi I have 2 raspberry PI in my network. And I want both of them accessibles from the internet. Right now I have a DMZ from you can access one with NO-IP setup: www.blabla.no-ip.org ----->DMZ ...
1
vote
1answer
83 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
1
vote
1answer
170 views

The best approach to access server in DMZ (outside domain) from LAN via command line (MS Windows)

I have two servers: SVR1 (Windows Server 2008) in LAN - part of domain SVR2 (Windows Server 2008) in DMZ - workgroup I need to access SVR2 from SVR1 via command line batch - copy some files and ...
1
vote
1answer
267 views

CRM 2013 Internet Facing Deployment (IFD)

For previous CRM IFDs I have placed the CRM Front End server in the DMZ along with an ADFS Proxy and allowed access from the Domain Controller to the CRM Front End through the firewall. This is ...
0
votes
1answer
60 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
0
votes
0answers
156 views

Transparent bridge proxy between gateway with DMZ and router

I'm attempting to build a transparent bridged proxy using ebtables, bridge-utils and squid3 as seen in the following article. ...
0
votes
4answers
94 views

Best Method to test Opened Ports [closed]

We have a requirment where in we have to test 500+ Port opening rules. So requires a suggest on below points. Which is the best tool to test the connectivity of the ports. Telnet will be sufficient ...
-1
votes
2answers
51 views

Multiple non-http services, 1 static IP [closed]

I have an issue where we have several non-http(s) services which we would like to access from across the WAN. SSH is a primary protocol we'd be using, FTP as well. Here's how things are laid out. We ...
6
votes
2answers
1k views

Distinction between an extranet and a DMZ

I've been reading about intranets, extranets, DMZs and VPNs now, and I'd need some clarifications related to extranets and DMZs. I understand that they are different types of concepts - extranet ...
0
votes
2answers
201 views

How to use single public IP to access multiple application servers in SAP?

Scenario I have: Wireless D-Link Router Connected to the Internet Two IBM-Lenovo Servers Connected( Wireless/Wired) to the Router Two servers have IP addresses : 192.xxx.xxx.123 and ...
0
votes
1answer
1k views

Error connecting to sql server database when running IIS from DMZ

I've been working on this for a few days now. One of our clients has a 3 tier server plan - an IIS server, an application server (where the Asp.Net MVC3 application is located) and the db server. All ...
0
votes
0answers
44 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
1answer
214 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
0
votes
1answer
2k views

Can't establish a reliable VPN tunnel (ShrewSoft client / ZyWALL USG-50 firewall)

I try to setup an IPSec VPN tunnel through my firewall (ZyWall USG-50), but it doesn't work like it should. quick scheme of my installation: ME [A.B.C.D] --- **INTERNET** | ...
2
votes
0answers
2k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
0
votes
2answers
114 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
1
vote
1answer
142 views

Firewall setup Huawei 4G with DMZ

Network topology: ISP1 | | Alternative ISP 4G | | | Huawei 4G with DMZ | | ...
0
votes
1answer
115 views

2 NIC vs NAT for exposing server

I'm trying to virtualize some applciation using citrix. so I have to expose the secure gateway to Internet (put it in DMZ). my question is which is better practice ? 1 - using 2 physical NIC, one ...
0
votes
1answer
156 views

LAMP server kerberos config to authenticate against a read only Windows KDC in a dmz

Background: We have a number of AD networks (domains) that are connected through VPNs and have established AD trust relationships. We have an externally hosted web server and have configured ...
0
votes
1answer
261 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
0
votes
1answer
41 views

OpenSuSE server in demilitarized zone can still ping internal network?

I don't know much about setting up DMZ but from what I read in the OpenSUSE docs, putting a network interface in the DMZ zone allows reaching it from both external and internal networks while ...
0
votes
1answer
1k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
2
votes
1answer
58 views

Web server with access to internet and internet Active Directory [closed]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
56 views

Managing ServerCore 2008 R2 in DMZ

I am looking to replace our DMZ servers with Server Core editions but am struggling with remote management. The computers in the DMZ are in a workgroup while the client I am connecting from is on our ...
0
votes
3answers
157 views

Is it a good idea to only allows connections to be established in the LAN->DMZ direction?

I'm trying to setup the usual thing, with a DMZ containing servers that can be accessed from the internet, and a LAN that should be as secure as possible. I happen to also have total freedom on the ...
1
vote
1answer
270 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
0answers
204 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...
-1
votes
1answer
115 views

ZyWALL 2 Plus firewall make NAS public [closed]

How can I configure so that I can have access to my NAS world wide ? I tried different options but none of the combinations went successfully. FROM WAN to LAN - allow any to a specific address from ...
0
votes
1answer
580 views

Proposed Network Design for DMZ with Server Virtualization?

I have the following proposed network design that I will be implementing. All connection for server and PCs are connected through an All in One cisco firewall Only one high end server will be used. ...
0
votes
2answers
508 views

Network design vm virtualization in small office [closed]

I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office. ...
0
votes
1answer
284 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
0answers
150 views

Freebsd routing doesn't work

My FreeBSD 9.1 has 3 interfaces: de0 - Internet 1.1.1.45 de1 - LAN 192.168.1.1 de2 - DMZ which I have just added 1.1.1.43 default gateway 1.1.1.33 I have one host on DMZ 1.1.1.42 i have ...
-1
votes
2answers
452 views

Debating our network structure (DMZ, database, service)

We're trying to decide where we should locate different servers. Should we put them in the DMZ? In our trusted network zone? And so on... Lots have been written on this topic, but there seems to be ...
1
vote
1answer
300 views

iptables: Allowing only established outgoing connections like DMZ

I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own. I would ...
0
votes
2answers
728 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
0
votes
0answers
202 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
1
vote
1answer
333 views

When moving a server from behind a firewall into a DMZ, should you move a test server first? [closed]

We have to move a server from within the firewall to a DMZ (not a true DMZ, but a space that's between 2 firewalls. Is it typically a good idea, when moving a server in this fashion, to stand up ...