In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

1
vote
1answer
11 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
2answers
1k views

Setup DMZ in Pfsense with virtual servers, physical Pfsense server

I am looking for some networking tips on how to set up a DMZ in Pfsense and place some virtual servers in that DMZ. Right now my network looks like: Uverse (Static IPs) -> Pfsense -> WAN -> (Virtual ...
-2
votes
1answer
33 views

I can't access my home server using my public IP from local network [closed]

I've seen this question I can't access my public IP from local network but I think it's different I have a Vodafone Spain router from Huawei, model HG253sV2. In my local network I setup a HTTP ...
0
votes
0answers
24 views

DMZ with 2 firewall - How to allow access to DMZ from LAN

i following tutorial to setup DMZ with 2 filewall. Diagram Network can be found here --[Modem]------eth0-[External FW]-eth1------eth1-[Internal FW]-eth2-------[Intranet] External FW: eth0: 192.168....
1
vote
2answers
58 views

Get access to services outside VPN while tunneling OpenVPN Access Server

I have two VPS with one on which I installed OpenVPN Access Server and vpn client on the second one. When I connect the client to the OpenVPN AS, I can't get access to apache which is installed on the ...
0
votes
2answers
20 views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
0
votes
1answer
23 views

Why is my ISP box talking to my DMZ host?

I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following Internet - PublicIP - ...
1
vote
0answers
41 views

Small business network vlans and hyper-v configuration

We are a small business and have been successfully running one Hyper-V 2012 R2 vmhost with many Windows Server 2012 VMS that includes a DC, Web Server, CRM Server and SQL Server for a couple of years. ...
3
votes
1answer
2k views

Disable EdgeRouter Lite GUI on DMZ interface

I'm using the Ubiquiti EdgeRouter in a SOHO network. I've configured it using the "WAN+2LAN2" wizard, without bridging the LAN ports. This sets up the three port router with eth0 assigned to the WAN,...
0
votes
1answer
60 views

Router configuration, subnetting, DMZ

I'd like to use a subnet of our public IP addresses in the DMZ like shown in this picture: Does my provider have to add a routing entry on the first router for the DMZ-net? Can I assign the whole ...
1
vote
2answers
225 views

How to redesign our network?

We currently have three networks, X.X.163.1, X.X.93.1 and 192.168.1.1. Today's setup is like this: We now have PPT VPN from internet to the X.X.163.1-network, but really need to access the files ...
1
vote
1answer
33 views

api connecting from WAN to LAN?

I'm not an application developer - Ill start off with that caveat. In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
0
votes
1answer
11 views

Test WAN access to our local area network after opening the DMZ

On our router we have recently opened a port. We want to test whether those outside our local area network are able to obtain access. How can we do this? Unfortunately, we do not have a connection ...
0
votes
1answer
53 views

Windows RODC/DMZ connection to trusted AD issue

I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
1
vote
1answer
120 views

How to make Docker resolve DMZ host?

Imagine I have this setup: An application server Private IP: 1.0.0.1; Private hostname: machine1.internal.domain Public IP : 2.0.0.1; Public hostname : machine1.example.com A ...
1
vote
1answer
4k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
0
votes
0answers
16 views

Vlan need to reach server from ouside with public ip

My primary goal is to have number on server in vshpere that are located in one vlan that is nor reachable for other vlans in my network. Finaly i must reach server from outside by public ip (winbox ...
1
vote
1answer
156 views

adfs proxy and dmz configuration

I am trying to setup an ADFS proxy in a DMZ as per Microsoft's best practices, but do not really understand how this is done practically. The basic premise is that a server is placed in the DMZ and ...
2
votes
1answer
47 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every non-...
0
votes
1answer
87 views

When I ping local IP address I get a reply from external IP

I have SonicWall NSA 2400. Port X2 is WAN port with following settings X.X.X.250 / 255.255.255.248. I connected VPN concentrator to port X5, which is assigned to DMZ zone in Transporarent IP Mode for ...
2
votes
1answer
3k views

Where to put OpenVPN server - DMZ or LAN?

We have a Smoothwall firewall with both a "green" network (LAN) and an "orange" network (DMZ), and we would like to use OpenVPN access server as our VPN server. The question is: Should the VPN server ...
0
votes
0answers
60 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...
0
votes
1answer
223 views

2 NIC vs NAT for exposing server

I'm trying to virtualize some applciation using Citrix. so I have to expose the Citrix Secure Gateway to Internet (put it in DMZ). my question is which is better practice ? using 2 physical NIC, ...
1
vote
0answers
156 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
1answer
612 views

Run Service Control (sc.exe) command on secure port

Our team runs the following commands to turn on and off Windows Services (e.g. JBoss Native) from the Windows command line as well as through source code in a program. It connects to a remote box. ...
2
votes
3answers
356 views

Allow internal DNS to be queried from the DMZ?

We have a mail gateway running in a DMZ, which is a relay for our internal mail server holding all the mail. We have come accross the need to use DNS from the DMZ to resolve names of internal services ...
4
votes
1answer
8k views

DMZ Setup with two firewalls - Traffic from DMZ to LAN and LAN to DMZ

I am setting up a network with machines that need to be accessible from the internet. I'm planning on putting these in a DMZ. Some of the machines in the DMZ need access to machines on the private ...
2
votes
2answers
4k views

How to configure totally open DMZ with OpenWRT?

I have OpenWRT router. I have NAS in my LAN, which i need to access from WAN and from all computers in the LAN. So, it should be accessible from any computer and it needs to access some of them, too. ...
1
vote
1answer
104 views

Virtual web server configuration dmz [closed]

I have 2 rx300 server with Esxi and I want to use one of these as web virtual server with 2 VM running: - Mail server - WEB server for enterprise website and ecommerce. the esxi server has an iscsi ...
1
vote
1answer
253 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
2
votes
1answer
914 views

Active Directory member servers in the DMZ [duplicate]

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
0answers
319 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
7
votes
2answers
3k views

Distinction between an extranet and a DMZ

I've been reading about intranets, extranets, DMZs and VPNs now, and I'd need some clarifications related to extranets and DMZs. I understand that they are different types of concepts - extranet ...
2
votes
3answers
213 views

WinRM Publicly Available

I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or ...
-1
votes
1answer
428 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
2
votes
1answer
952 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
1answer
92 views

Domino web server config

I am configuring a Domino web server. I have configured it as follows: Web server has no connection to admin server. Connections are initiated by the Admin server. Admin server has a connection ...
0
votes
1answer
778 views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
1
vote
1answer
836 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
0
votes
2answers
886 views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
0
votes
1answer
55 views

Access 2 Hosts from Internet on same subnet [closed]

Hi I have 2 raspberry PI in my network. And I want both of them accessibles from the internet. Right now I have a DMZ from you can access one with NO-IP setup: www.blabla.no-ip.org ----->DMZ ...
1
vote
1answer
166 views

Spoofing DNS for another domain within a DMZ

I am setting up a DMZ disconnected from our corporate LAN. I've moved DNS services for the DMZ hosts into the DMZ with a stripped down set of zone info containing only what the DMZ hosts need to know. ...
1
vote
1answer
911 views

The best approach to access server in DMZ (outside domain) from LAN via command line (MS Windows)

I have two servers: SVR1 (Windows Server 2008) in LAN - part of domain SVR2 (Windows Server 2008) in DMZ - workgroup I need to access SVR2 from SVR1 via command line batch - copy some files and ...
0
votes
1answer
492 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
1
vote
1answer
557 views

CRM 2013 Internet Facing Deployment (IFD)

For previous CRM IFDs I have placed the CRM Front End server in the DMZ along with an ADFS Proxy and allowed access from the Domain Controller to the CRM Front End through the firewall. This is ...
0
votes
2answers
6k views

Fortigate 40c Firewall Configuration

Does anybody know if is it possible to Un-bridge ports on forgiate 40c? I want to use the fortigate 40c to define and control (block/allow) port traffic for the following 4 ip ranges (each ip range ...
0
votes
1answer
65 views

Port forwarding with 2 interfaces not working

I'm running debian and I've got the following network configuration: eth0 Link encap:Ethernet inet addr:192.168.16.6 Bcast:192.168.16.255 Mask:255.255.255.0 inet6 addr: ...
0
votes
4answers
617 views

Best Method to test Opened Ports [closed]

We have a requirment where in we have to test 500+ Port opening rules. So requires a suggest on below points. Which is the best tool to test the connectivity of the ports. Telnet will be sufficient ...
-1
votes
2answers
65 views

Multiple non-http services, 1 static IP [closed]

I have an issue where we have several non-http(s) services which we would like to access from across the WAN. SSH is a primary protocol we'd be using, FTP as well. Here's how things are laid out. We ...
0
votes
2answers
536 views

How to use single public IP to access multiple application servers in SAP?

Scenario I have: Wireless D-Link Router Connected to the Internet Two IBM-Lenovo Servers Connected( Wireless/Wired) to the Router Two servers have IP addresses : 192.xxx.xxx.123 and 192.xxx.xxx....