In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

0
votes
1answer
464 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
0
votes
1answer
63 views

OpenSuSE server in demilitarized zone can still ping internal network?

I don't know much about setting up DMZ but from what I read in the OpenSUSE docs, putting a network interface in the DMZ zone allows reaching it from both external and internal networks while ...
1
vote
1answer
4k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
2
votes
1answer
73 views

Web server with access to internet and internet Active Directory [closed]

This might sound like a stupid and unsecure question, but we're front-end web delopers and don't know that much about these things. So here goes.. We're creating a web app where we want to log in ...
1
vote
1answer
111 views

Managing ServerCore 2008 R2 in DMZ

I am looking to replace our DMZ servers with Server Core editions but am struggling with remote management. The computers in the DMZ are in a workgroup while the client I am connecting from is on our ...
1
vote
3answers
266 views

Is it a good idea to only allows connections to be established in the LAN->DMZ direction?

I'm trying to setup the usual thing, with a DMZ containing servers that can be accessed from the internet, and a LAN that should be as secure as possible. I happen to also have total freedom on the ...
1
vote
1answer
596 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
0answers
397 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...
-1
votes
1answer
182 views

ZyWALL 2 Plus firewall make NAS public [closed]

How can I configure so that I can have access to my NAS world wide ? I tried different options but none of the combinations went successfully. FROM WAN to LAN - allow any to a specific address from ...
1
vote
1answer
975 views

Proposed Network Design for DMZ with Server Virtualization?

I have the following proposed network design that I will be implementing. All connection for server and PCs are connected through an All in One cisco firewall Only one high end server will be used. ...
0
votes
2answers
725 views

Network design vm virtualization in small office [closed]

I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office. ...
0
votes
1answer
415 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
2answers
767 views

Debating our network structure (DMZ, database, service)

We're trying to decide where we should locate different servers. Should we put them in the DMZ? In our trusted network zone? And so on... Lots have been written on this topic, but there seems to be ...
1
vote
1answer
440 views

iptables: Allowing only established outgoing connections like DMZ

I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own. I would ...
0
votes
2answers
1k views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
1
vote
1answer
674 views

When moving a server from behind a firewall into a DMZ, should you move a test server first? [closed]

We have to move a server from within the firewall to a DMZ (not a true DMZ, but a space that's between 2 firewalls. Is it typically a good idea, when moving a server in this fashion, to stand up ...
0
votes
2answers
861 views

Implement a new dns server in a DMZ

I currently have a few Dns servers (ad Integrated). Internally we are using domain.local and one ISA server running DNS domains domain.com and some other .com domains. I have one server that is an ...
1
vote
2answers
2k views

how to route external IP to internal without MASQUERADE

Ok, i'm still working on creating a dmz'd http server So now I have an ethernet tunnel using ssh -w 0:0 and I have interfaces on each end which can talk to each other: previous question So now I'...
3
votes
1answer
2k views

Should I dual home our webservers (DMZ/Internal network) or just do 1-to-1 NAT?

I'm setting up a rack of servers which will have 2 webservers and 10 internal servers that provide back end application support (migrating from an AWS environment). We'll have virtual machine ...
1
vote
1answer
682 views

Moving uploaded files through a DMZ

I'm transitioning a web app (runs on LAMP) from a single host to a configuration with the php/apache app running on a public facing server in a DMZ. The app connects to mysql which is sitting in a ...
1
vote
1answer
647 views

DMZ config on RV082 router

We are connecting 2 offices with a dedicated point to point connection. Both offices have the Cisco RV082 router. In both offices, the routers are being used for internet on the WAN1 port. This ...
0
votes
1answer
535 views

SMB for specific user from DMZ to internal

I've got one server in a DMZ which has limited access via SMB to another one in the internal network. A web server on that external machine needs access to a whole partition on that internal server. ...
1
vote
1answer
1k views

Subversion server behind firewall and Apache reverse proxy exhibits intermittent hanging

Here's my situation: 1) DMZ: I have an self-signed SSL Cert on an Apache server (our bastion host) configured to run as a reverse proxy for 7 other LAN servers (subversion, ldap, jenkins, confluence,...
2
votes
1answer
3k views

Where to put OpenVPN server - DMZ or LAN?

We have a Smoothwall firewall with both a "green" network (LAN) and an "orange" network (DMZ), and we would like to use OpenVPN access server as our VPN server. The question is: Should the VPN server ...
1
vote
2answers
1k views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
3
votes
1answer
6k views

VLAN security compared to DMZ

I found this question very illuminating about DMZs and when to place a server in one. We're re-organizing our internal company network (keeping the same external IPs and domains), our mainly Windows ...
2
votes
0answers
415 views

Deploying a ASP.Net WebAPI website and DMZ

I have a set of RESTful services developed using ASP.Net WebAPI which is a single project. I handle authentication via ASP.Net's built in Forms Authentication (cookie based) mechanism which is also ...
1
vote
2answers
115 views

Google Analytics: No stats from DMZ network segment

We need to track hits on a particular page for usage stats, evaluate client need, etc. More specifically we need to track an internal DMZ network segment for hits on this page. Google Analytics ...
1
vote
1answer
1k views

Servers in DMZ will not communicate with each other

(Full disclosure: I rate barely above "noob" when it comes to networking.) My workplace recent got a new web server. Since we're nearing the end of an overhaul of our website, we're doing a slooooow ...
1
vote
1answer
4k views

Cisco adaptive security appliance is dropping packets where SYN flag is not set

We have an apache instance sitting inside our DMZ which is configured to proxy requests to an internal NATed tomcat instance inside our network. It works fine, but then all of a sudden requests from ...
2
votes
1answer
2k views

How to Deploy an ASP.NET Web API- and Browser-based Application to a Production Environment [closed]

(Please forgive if this is posted in an incorrect forum. We didn’t know exactly where to post it.) We have an ASP.NET Web API single page application - a browser-based app running in IIS to serve up ...
1
vote
1answer
325 views

API exposing services running on LAN to serve website in DMZ

I have a team of developers who are writing both an intranet and external website. The website consists of two servers and a load balancer, inside a DMZ. The DMZ has a pinhole open to the LAN (http/...
1
vote
2answers
484 views

Do I need to place a physical server/host within the DMZ to host servers/applications?

We are moving to a new office, and part is to review our current LAN/WAN and server access to/from the web. I understand how the DMZ works, but can't figure out if I need a physical server/host to be ...
1
vote
2answers
682 views

Linux - Get Outbound/Inbound Traffic by IP address

I am hosting a website and I found that the traffic on my server is quite high. My Linux server is behind a router in a DMZ. I would like to see the traffic made on my Linux box on the eth0 interface,...
2
votes
2answers
4k views

How to configure totally open DMZ with OpenWRT?

I have OpenWRT router. I have NAS in my LAN, which i need to access from WAN and from all computers in the LAN. So, it should be accessible from any computer and it needs to access some of them, too. ...
3
votes
1answer
88 views

How can I tell if a host is bridged and acting as a router

I would like to scan my DMZ for hosts that are bridged between subnets and have routing enabled. Since I have everything from VMWare servers, to load balancers on the DMZ I'm unsure if every host is ...
3
votes
1answer
1k views

How to place a virtual machine in DMZ?

I have an Ubuntu 12.04 server running few virtual machines with KVM. I would like to expose some of these virtual machines on the internet, to make it possible for customers to test the products we'...
7
votes
4answers
274 views

Security for university research lab systems

Being responsible for security in a university computer science department is no fun at all. And I explain: It is often the case that I get a request for installation of new hw systems or software ...
2
votes
1answer
1k views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
2
votes
2answers
551 views

Internal traffic card and external traffic cards on the same server… how to configure?

This might sound like a noob question, but here is what I have to configure: FreeBSD 1 server with 2 network cards 1 network card for internal IP addresses (5 of them) 1 network card for external IP ...
0
votes
1answer
221 views

Centralizing our FTP processes via an SFTP server in our DMZ

We have a number of various FTP processes, running on various internal servers, that connect with outside vendors to send or receive sensitive data files. As such, we don't have one centralized place ...
0
votes
1answer
2k views

Giving a VM access to a physical NIC on the host

I am running VMware Server 2.0.2 with 2 VM's. One of the VM's I want to have bridged with the domain/primary NIC of the host which I have done successfully. I want the other VM to have access to only ...
4
votes
1answer
9k views

DMZ Setup with two firewalls - Traffic from DMZ to LAN and LAN to DMZ

I am setting up a network with machines that need to be accessible from the internet. I'm planning on putting these in a DMZ. Some of the machines in the DMZ need access to machines on the private ...
1
vote
2answers
1k views

Reverse Proxy - should it be a different technology stack?

Got a skeptical question about a reverse proxy setup I'm considering. I've currently got a pair of load balanced application servers in the DMZ (S1,S2 in figure below). These accept inbound requests ...
2
votes
1answer
553 views

Howto maximize utilization of assigned subnet block for DMZ

I'm part time sysadmin for a small hosting company with currently 20 different public servers. We have a 27 subnet block that gives us a maximum of 30 usable IP addresses. That much I know, but how do ...
0
votes
2answers
6k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
1
vote
4answers
863 views

Looking for low cost VPN/DMZ solution [closed]

I am looking to set up a VPN and DMZ solution for a small business. Here is some background and some of their requirements: The is a small business with maybe a dozen servers and another half-dozen ...
0
votes
2answers
11k views

Fortigate Firewall - DMZ vs Interface ports

I'm considering buying a Fortigate 50b (or Fortigate 60b) firewall to separate my web (iis) machine from the DB machine. (See http://www.fortinet.com/doc/FGT50_100DS.pdf) Till now the two servers ...
5
votes
1answer
639 views

Backing up a server on the DMZ

We have a somewhat-static web app with a large amount of media files that runs on a 2008 R2, non-domain server on the DMZ. I need to backup the media files on the server. The current backup mechanism ...
5
votes
2answers
5k views

public ip resolves externally but not internally

I have a one to one NAT on pfsense that assigns a public IP to an internal IP (running a web server). When I open the public IP from an internal machine, it will not resolve to the internal IP, ...