In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

1
vote
2answers
66 views

Get access to services outside VPN while tunneling OpenVPN Access Server

I have two VPS with one on which I installed OpenVPN Access Server and vpn client on the second one. When I connect the client to the OpenVPN AS, I can't get access to apache which is installed on the ...
0
votes
2answers
36 views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
0
votes
2answers
892 views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
0
votes
2answers
325 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are up,...
0
votes
2answers
659 views

Port Forwarding failing only to Ubuntu servers from Draytek router

I know this is a kinda unusal question, but Draytek support (..which is very eager to solve the issue) seems to reach its limits. Scenario: Draytek Vigor Multiwan router with current firmware. ...
2
votes
1answer
52 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every non-...
2
votes
1answer
1k views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
1
vote
1answer
13 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
1answer
140 views

How to make Docker resolve DMZ host?

Imagine I have this setup: An application server Private IP: 1.0.0.1; Private hostname: machine1.internal.domain Public IP : 2.0.0.1; Public hostname : machine1.example.com A ...
1
vote
1answer
199 views

adfs proxy and dmz configuration

I am trying to setup an ADFS proxy in a DMZ as per Microsoft's best practices, but do not really understand how this is done practically. The basic premise is that a server is placed in the DMZ and ...
1
vote
1answer
266 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
1
vote
1answer
858 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
1
vote
1answer
597 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
1answer
443 views

iptables: Allowing only established outgoing connections like DMZ

I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own. I would ...
1
vote
1answer
328 views

API exposing services running on LAN to serve website in DMZ

I have a team of developers who are writing both an intranet and external website. The website consists of two servers and a load balancer, inside a DMZ. The DMZ has a pinhole open to the LAN (http/...
1
vote
1answer
333 views

DMZ setup and firewall throughput limit

I am in the process of moving server room into the datacenter and it is a good time to review current setup for security zones.We are using Vsphere 4 Standard and Cisco ASA 5510 firewall. At the ...
0
votes
1answer
23 views

Why is my ISP box talking to my DMZ host?

I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following Internet - PublicIP - ...
0
votes
1answer
64 views

Windows RODC/DMZ connection to trusted AD issue

I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
0
votes
1answer
93 views

When I ping local IP address I get a reply from external IP

I have SonicWall NSA 2400. Port X2 is WAN port with following settings X.X.X.250 / 255.255.255.248. I connected VPN concentrator to port X5, which is assigned to DMZ zone in Transporarent IP Mode for ...
0
votes
1answer
814 views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
0
votes
1answer
498 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
0
votes
1answer
415 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
1answer
484 views

Combine two NIC's into one preserving routing (DMZ server / Windows or Linux)

We have a DMZ server with two NIC's, one is accessed from the Internet (public IP) and one from behind the internal firewall (private IP). One application has problems to cope with a 2 IP's / 2 NIC's ...
-1
votes
1answer
444 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
-1
votes
1answer
591 views

FTP in DMZ, TCP Ports for LDAP Auth

szenario: (outside)---(ASA5510)---(inside) ->Windows2008 DC .....................(dmz) ..........->Win2008 FTP Server Which Ports do I need to open from DMZ->Inside that FTP Users can ...
2
votes
0answers
4k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
416 views

Deploying a ASP.Net WebAPI website and DMZ

I have a set of RESTful services developed using ASP.Net WebAPI which is a single project. I handle authentication via ASP.Net's built in Forms Authentication (cookie based) mechanism which is also ...
1
vote
0answers
49 views

Small business network vlans and hyper-v configuration

We are a small business and have been successfully running one Hyper-V 2012 R2 vmhost with many Windows Server 2012 VMS that includes a DC, Web Server, CRM Server and SQL Server for a couple of years. ...
1
vote
0answers
164 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
0answers
344 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
1
vote
0answers
398 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...
0
votes
0answers
33 views

DMZ with 2 firewall - How to allow access to DMZ from LAN

i following tutorial to setup DMZ with 2 filewall. Diagram Network can be found here --[Modem]------eth0-[External FW]-eth1------eth1-[Internal FW]-eth2-------[Intranet] External FW: eth0: 192.168....
0
votes
0answers
16 views

Vlan need to reach server from ouside with public ip

My primary goal is to have number on server in vshpere that are located in one vlan that is nor reachable for other vlans in my network. Finaly i must reach server from outside by public ip (winbox ...
0
votes
0answers
63 views

Use RRAS Assigned Static IP for TCP

I'm using RRAS on Windows Server 2012 to establish a VPN client connection from a server I have offsite and my home computer. What I would like to do is use the RRAS assigned static IP that I am ...