Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dmz]

In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes referred to as a perimeter network.

0
votes
0answers
38 views

OpenVPN without NAT or DHCP

I am trying to setup an OpenVPN server similar to LiquidVPN.com. WIth their VPN server when a client connects it receives the public IP address of the server. All network traffic to the public IP is ...
0
votes
2answers
77 views

Do I need routers in a LAN with 2-firewall DMZ solution? [closed]

I have a LAN that will host an EXTRANET site with 5 servers, and 2 exchange edge servers. The LAN will service an office in a 5 story building with about 100-200 users on each floor. Each floor will ...
0
votes
0answers
73 views

TLS check failing because of Cert for exchange

I have an on-premise exchange 2016 environment. There is an internal exchange server (on the domain) and a server in the DMZ that is not on the domain that is running the Edge Transport service. ...
1
vote
1answer
187 views

Dedicated IP for webserver through pfsense and a draytek 2860

We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router. From here we have an internal network which we use for our office computers and another network for ...
0
votes
1answer
64 views

Run windows services with different network credentials

I have server (W2016) in DMZ, not in domain. And I need start windows services (Dynamics NAV third party application) under local account but with different network credential (domain account) for SQL ...
0
votes
0answers
26 views

OpenSSH with OATH from WAN and without from LAN

I have placed a simple ARM based Debian machine in a DMZ and I would like to set up an SSH proxy into my network. To do this, I would like to require anybody connecting from the WAN to provide a key ...
0
votes
1answer
568 views

Cisco ASA 5505 - Access to DMZ with one public IP

I am trying to configure my Cisco ASA 5505 firewall to allow access from the internet to DMZ web and mail server. I'm new to the Cisco world so excuse me if this is a newbie question. I know that this ...
0
votes
1answer
46 views

How to setup a web ERP server that needs to be accessible outside the local network?

We have a network of servers and computers on an AD Domain. One of the servers runs a PHP based management system (ERP) and we want to have it accessible on the internet. When I say internet I don't ...
0
votes
1answer
410 views

Access Samba server in light “DMZ” using two Fritzbox 7390

I'm using a router cascade out of two Fritzbox 7390 to implement a light version of a DMZ. Every Fritzbox has its own subnet. Fritzbox 1 (192.168.178.0/24) is connected to the Internet Service ...
0
votes
0answers
214 views

How to configure two firewalls for two WANs and one LAN

I have two WANs with static IPs: DSL (PPPoA) Fibre (Ethernet through fibre media converter) So far I was using one firewall Vigor2830Vn to handle traffic from both WAN ports. But I need to be able ...
0
votes
2answers
4k views

Public IP or Private IP for the DMZ area

Lets say I have three networks in my topology : Internal network, DMZ, Internet. And my DMZ Area contains a lot of servers, but lets say in this example that it contains only a DNS Server and a Web ...
0
votes
1answer
243 views

DMZ on Hyper-V using VLAN with fortigate

One of my customers would like to publish his HR Portal on the internet, It is a IIS website, running on a virtual machine in a Hyper-V environment. This company has a single host, with 2 NIC paired, ...
1
vote
0answers
80 views

Remote Desktop Jump Using Different Licence Servers

Quick overview of system: I have a business (IT) domain and a process control network (PCN) domain joined via a pair of firewalls and a DMZ (DMZ servers part of PCN domain also). PCN domain servers ...
0
votes
0answers
85 views

How to forward https request to internet

I have one web server need access internet web service such as https://example.com/cgi-bin/* and this server deployed in intranet and also have one DMZ server can access internet directly. So, how to ...
3
votes
0answers
667 views

Kubernetes - Best Practices for Physical Network Segmentation

Based on the following design constraint, does anyone have any best practices or recommendations regarding how to deploy Kubernetes across multiple network zones? What is the most common and accepted ...
1
vote
1answer
2k views

AWS: Reverse Proxy to access private instance

I am looking for a best practice to set up a reverse proxy providing access to a private instance (for example a web server). I thought it would be possible to do this: create a VPC with one private ...
0
votes
1answer
324 views

Pysical Server 2 NICS LAN and DMZ

I'm after some advice. I have a Physical server with 2 on-board NICs. Currently only one is used for LAN. If I wanted to setup Hyper-V and use the second NIC for DMZ stuff, is that possible? I ...
0
votes
2answers
538 views

Cisco Asa 5506 Public IP's in DMZ

I am running an ASA 5506 (9.6). I have two IP Ranges 1.35.133.88/29 and 1.35.135.176/29. I have setup in my router the routes. I have an outside interface with 1.35.133.90. I have an DMZ interface ...
11
votes
1answer
54 views

Redundant web servers - 1 public addres

I'd like to host redundant internet accessible (NATed) web servers behind a f/w on the same standard ports. If I only have 1 publicly available address do i have to use a reverse proxy or load ...
1
vote
1answer
459 views

pfSense DMZ VMware and Ubuntu 16.04.1 LTS

In a VMware environment I am having connectivity issues (no ping) between the gateway (pfSense DMZ) and Ubuntu server 16.04.1 LTS. Pfsense is working fine from the LAN subnet 192.168.1.0/24 but not ...
0
votes
1answer
10k views

Mikrotik, block internet for specific ip but allow traffic for dmz or private network

I have Mikrotik RBcAP2n with one lan i one wlan. Wlan WiFi is for clients and Lan is for ADSL. Between MKRB and ADSL I have one server on the same network as MKRB and ADSL. Server have apache web site ...
0
votes
1answer
1k views

Issues with DMZ on Fortigate 90D, second router can't reach internet

I am having issues setting up a DMZ port on my Firewall (hardware router). I am also assuming this belongs in Super User, as it seems like a basic DMZ setup. Here is the setup: I have a Fortigate 90D ...
1
vote
1answer
40 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
-2
votes
1answer
579 views

I can't access my home server using my public IP from local network [closed]

I've seen this question I can't access my public IP from local network but I think it's different I have a Vodafone Spain router from Huawei, model HG253sV2. In my local network I setup a HTTP server....
1
vote
2answers
486 views

Get access to services outside VPN while tunneling OpenVPN Access Server

I have two VPS with one on which I installed OpenVPN Access Server and vpn client on the second one. When I connect the client to the OpenVPN AS, I can't get access to apache which is installed on the ...
1
vote
2answers
602 views

Hyper-V DMZ environment

Im facing some problems trying to create a DMZ virtual machine in Hyper-v. Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
0
votes
1answer
33 views

Why is my ISP box talking to my DMZ host?

I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following Internet - PublicIP - ...
1
vote
0answers
177 views

Small business network vlans and hyper-v configuration

We are a small business and have been successfully running one Hyper-V 2012 R2 vmhost with many Windows Server 2012 VMS that includes a DC, Web Server, CRM Server and SQL Server for a couple of years. ...
0
votes
1answer
228 views

Router configuration, subnetting, DMZ

I'd like to use a subnet of our public IP addresses in the DMZ like shown in this picture: Does my provider have to add a routing entry on the first router for the DMZ-net? Can I assign the whole 193....
1
vote
1answer
104 views

api connecting from WAN to LAN?

I'm not an application developer - Ill start off with that caveat. In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
0
votes
1answer
25 views

Test WAN access to our local area network after opening the DMZ

On our router we have recently opened a port. We want to test whether those outside our local area network are able to obtain access. How can we do this? Unfortunately, we do not have a connection ...
1
vote
1answer
739 views

How to make Docker resolve DMZ host?

Imagine I have this setup: An application server Private IP: 1.0.0.1; Private hostname: machine1.internal.domain Public IP : 2.0.0.1; Public hostname : machine1.example.com A ...
1
vote
1answer
768 views

Windows RODC/DMZ connection to trusted AD issue

I have a really strange scenario...We have a server within a DMZ, which uses an RODC (Read-Only Domain Controller) for user authentication. The users are in a trusted 3rd domain, something like ...
2
votes
1answer
294 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every non-...
1
vote
1answer
1k views

adfs proxy and dmz configuration

I am trying to setup an ADFS proxy in a DMZ as per Microsoft's best practices, but do not really understand how this is done practically. The basic premise is that a server is placed in the DMZ and ...
0
votes
1answer
362 views

When I ping local IP address I get a reply from external IP

I have SonicWall NSA 2400. Port X2 is WAN port with following settings X.X.X.250 / 255.255.255.248. I connected VPN concentrator to port X5, which is assigned to DMZ zone in Transporarent IP Mode for ...
1
vote
0answers
641 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
1answer
4k views

Run Service Control (sc.exe) command on secure port

Our team runs the following commands to turn on and off Windows Services (e.g. JBoss Native) from the Windows command line as well as through source code in a program. It connects to a remote box. ...
3
votes
3answers
2k views

Allow internal DNS to be queried from the DMZ?

We have a mail gateway running in a DMZ, which is a relay for our internal mail server holding all the mail. We have come accross the need to use DNS from the DMZ to resolve names of internal services ...
1
vote
1answer
211 views

Virtual web server configuration dmz [closed]

I have 2 rx300 server with Esxi and I want to use one of these as web virtual server with 2 VM running: - Mail server - WEB server for enterprise website and ecommerce. the esxi server has an iscsi ...
2
votes
1answer
2k views

Active Directory member servers in the DMZ [duplicate]

I want to be specific about terms. When I say DMZ I'm talking about a place where you would put servers that expose a service to untrusted networks like the Internet, or in some cases merely networks ...
1
vote
1answer
823 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
1
vote
0answers
840 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
2
votes
3answers
260 views

WinRM Publicly Available

I am looking for specific feedback on WinRM. There are ::still:: debates out there about whether or not making RDP publicly available without a VPN is a good idea--There are no debates on whether or ...
5
votes
1answer
4k views

Disable EdgeRouter Lite GUI on DMZ interface

I'm using the Ubiquiti EdgeRouter in a SOHO network. I've configured it using the "WAN+2LAN2" wizard, without bridging the LAN ports. This sets up the three port router with eth0 assigned to the WAN,...
-1
votes
1answer
817 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
2
votes
1answer
1k views

Allowing Internet traffic into DMZ using Azure Network Security Group

I am trying to create a simple DMZ using Azure Network Security Groups, using a Barracuda WAF as the public entrypoint into the DMZ, however I am having some trouble allowing internet traffic to ...
0
votes
1answer
123 views

Domino web server config

I am configuring a Domino web server. I have configured it as follows: Web server has no connection to admin server. Connections are initiated by the Admin server. Admin server has a connection ...
0
votes
1answer
2k views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
1
vote
1answer
2k views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...