In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes ...

learn more… | top users | synonyms

0
votes
2answers
175 views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
0
votes
2answers
84 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are ...
0
votes
2answers
621 views

Port Forwarding failing only to Ubuntu servers from Draytek router

I know this is a kinda unusal question, but Draytek support (..which is very eager to solve the issue) seems to reach its limits. Scenario: Draytek Vigor Multiwan router with current firmware. ...
0
votes
2answers
202 views

Network topology question

We currently have three networks, X.X.163.1, X.X.93.1 and 192.168.1.1. Today's setup is like this: http://i.stack.imgur.com/tkKWy.jpg We now have PPT VPN from internet to the X.X.163.1-network, but ...
2
votes
1answer
645 views

Best practices for LDAP and DMZ

We are in the process of setting up a DMZ and I have stumbled into the question of how to handle machines that need to have ports exposed to the internet, but at the same time be able to make LDAP ...
1
vote
1answer
121 views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
1
vote
1answer
85 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
1
vote
1answer
234 views

Automatically ask router for port redirection on ubuntu

Is there a way to use uPnp or something to automatically ask a router/firewall to redirect data coming from outside to a machine running ubuntu? Here's the deal, I'm supposed to prepare a certain ...
1
vote
1answer
285 views

iptables: Allowing only established outgoing connections like DMZ

I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own. I would ...
1
vote
1answer
201 views

API exposing services running on LAN to serve website in DMZ

I have a team of developers who are writing both an intranet and external website. The website consists of two servers and a load balancer, inside a DMZ. The DMZ has a pinhole open to the LAN ...
1
vote
1answer
685 views

How to configure totally open DMZ with OpenWRT?

I have OpenWRT router. I have NAS in my LAN, which i need to access from WAN and from all computers in the LAN. So, it should be accessible from any computer and it needs to access some of them, too. ...
0
votes
1answer
27 views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
0
votes
1answer
185 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
0
votes
1answer
1k views

Windows Server 2012 R2 Standard located in our DMZ has problems with connection to RoDC

We had an environment with multiple 2008 R2 DC:s in our internal LAN and a 2008 R2 RoDC:s in our DMZ. We set up 2008 R2 servers in our DMZ and joined them to the domain using DJOIN. Everything ...
0
votes
1answer
258 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
1answer
354 views

Combine two NIC's into one preserving routing (DMZ server / Windows or Linux)

We have a DMZ server with two NIC's, one is accessed from the Internet (public IP) and one from behind the internal firewall (private IP). One application has problems to cope with a 2 IP's / 2 NIC's ...
0
votes
1answer
293 views

DMZ setup and firewall throughput limit

I am in the process of moving server room into the datacenter and it is a good time to review current setup for security zones.We are using Vsphere 4 Standard and Cisco ASA 5510 firewall. At the ...
-1
votes
1answer
65 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
-1
votes
1answer
558 views

FTP in DMZ, TCP Ports for LDAP Auth

szenario: (outside)---(ASA5510)---(inside) ->Windows2008 DC .....................(dmz) ..........->Win2008 FTP Server Which Ports do I need to open from DMZ->Inside that FTP Users can ...
2
votes
0answers
1k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
236 views

Deploying a ASP.Net WebAPI website and DMZ

I have a set of RESTful services developed using ASP.Net WebAPI which is a single project. I handle authentication via ASP.Net's built in Forms Authentication (cookie based) mechanism which is also ...
1
vote
0answers
191 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...
0
votes
0answers
14 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
0answers
12 views

Icinga two servers LAN/DMZ

I installed Icinga Core 1.11 in LAN and Icinga-Web in DMZ, but now Icinga Classic Interface does not work because it is looking at the local Icinga Core instance. There is a way to use it with a ...
0
votes
0answers
148 views

Transparent bridge proxy between gateway with DMZ and router

I'm attempting to build a transparent bridged proxy using ebtables, bridge-utils and squid3 as seen in the following article. ...
0
votes
0answers
41 views

2 Vlans on a Cisco PIX 515 with DMZ

I have to install an application server on a networks dmz. The application will sit on a network but has no interaction with the other devices on that network. I was thinking that the firewall(Cisco ...
0
votes
0answers
143 views

Freebsd routing doesn't work

My FreeBSD 9.1 has 3 interfaces: de0 - Internet 1.1.1.45 de1 - LAN 192.168.1.1 de2 - DMZ which I have just added 1.1.1.43 default gateway 1.1.1.33 I have one host on DMZ 1.1.1.42 i have ...
0
votes
0answers
180 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...