Questions tagged [dmz]
In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes referred to as a perimeter network.
205
questions
0
votes
1
answer
32
views
Should I create a new forest for the DMZ
I have a local area network with a DC called "mycompanyptyltd.local" and a DMZ that is not in the AD DC forest.
I own the domain "mycompany.com" and I receive and send email from ...
- 1
-1
votes
1
answer
71
views
Windows Server with two NICs with cross communication between the two with DMZ
Network Topology
I have a Windows Server that is connected to a modem with a public ip address of 42.251.46.174 which is in DMZ that we will call Modem1.
I then have a modem with the public ip address ...
0
votes
0
answers
192
views
sssd password update not working, AD behind firewall
I have a centos server in a DMZ joined to my AD with sssd, minimum ports are open in the corporate firewall to allow the authentication but if the password of a user is updated on the AD, the Centos ...
- 1
0
votes
1
answer
846
views
How to add vpn to network with dmz
Consider the diagram on attached pic, which shows a typical DMZ Web server configuration.
How can this architecture be upgraded by appropriately
adding a VPN (Virtual Private Network) for dedicated ...
0
votes
0
answers
71
views
Is it secure? Owncloud in DMZ and refer to internal fileserver
Is this a secure setup?
Having an (linux based) Owncloud Server, with Let's-Encrypt SSL Certificate. This server provides shares to the clients, which are SMB connections to an internal File Server
...
- 73
0
votes
1
answer
563
views
Domain joined WAP in DMZ
To date, I've only ever used ADFS for claims aware applications.
I'm now looking at using it for some non-claims aware applications.
I've read that the WAP server must be domain joined for this so ...
- 1
0
votes
1
answer
573
views
Exchange 2016 ActiveSync in Edge Server
Dears,
We currently have an Exchange 2016 Edge server located in our DMZ and it is handling all our inbound and outbound emails. I noticed that there is no Activesync service/role inside Edge server. ...
- 63
0
votes
1
answer
547
views
SQL Server Linked Server readonly as security measure
I've got a configuration with to separate VLANs. In one of te VLANs, a Microsoft SQL server is running and doing it's thing. I'd like to read (and only read) data from this server from the second VLAN....
1
vote
0
answers
42
views
DMZ Member Servers unable to return or authenticate internal domain accounts
I have DC in a DMZ where I can easily look up domain accounts from our internal domain under the NTFS permission if I tried to add users/groups to folder NTFS permission whiles logged in to the DMZ DC....
- 11
0
votes
1
answer
1k
views
How do servers in the DMZ of a network communicate with internal servers, i.e. back-end servers that handle data processing?
I am bootstrapping a startup and I'm having some difficulty conceptually with figuring out, how a front-end server in the network DMZ is supposed to communicate with my internal back-end servers that ...
- 103
0
votes
1
answer
1k
views
One IP address does not respond to ping
Ok so here's the situation: I have a DMZ subnet, x.x.x.x, and this IP address( x.x.x.63 | 255.255.255.0 | gateway x.x.x.1) fails every ping request by any other device in the network but still works ...
- 1
1
vote
1
answer
363
views
Forest trust relationship between WAN and LAN through Pfsense
I'm using Pfsense with 3 interfaces : LAN, DMZ and WAN. The LAN contains my Domain Controller and my main forest of course (abc.com), the DMZ contains some web servers. The other forest is located ...
1
vote
2
answers
557
views
DMZ and ActiveDirectory users
I start by saying that I am not really familiar with AD and DMZs.
In my company, we have a DMZ with one server, isolated from the internal network (only a few open ports) and exposed to the web. There ...
- 113
1
vote
1
answer
158
views
A way to configure DMZ zone on Ethernet Mellanox Switch
Can't find any information is it possible at all and how to configure DMZ zone on Mellanox MSN2100 switch.
If I setup ACL disabling traffic from DMZ to LAN, I can't receive response to requests made ...
- 113
1
vote
1
answer
814
views
Should I use DMZ for a public NextCloud server hosted on a home network? [closed]
I would like to set up a small NextCloud installation on a Raspberry Pi 1 Model B+, or something like that, on my home network.I would like it to be accessible from the outside with a DNS of some sort....
user543656
0
votes
2
answers
2k
views
DMZ over OpenVPN
I'm setting up an OpenVPN server. I want it to redirect any incoming connection (except for ports 22 (ssh) and 1194 (the VPN server itself)) to a client connected to the VPN.
The VPN server will live ...
- 126
3
votes
0
answers
3k
views
(HTTP) Traffic from DMZ to internal LAN using reverse proxy
I see a lot of threads on this topic, but I'm still confused, so apologies if this is "obvious" (I'm not a network engineer).
Currently we have a two-zone DMZ/LAN setup. No traffic is allowed from ...
- 131
0
votes
2
answers
139
views
Fastest solution to use FTP/Aspera/MediaShuttle with SAN network
At my postpro studio we have a SAN Network (Stornext 6). There is also a MediaShuttle and FTP server in a VM on the firewall (I know, I know... Not my fault, really xD).
The VM is sharing SAN over ...
- 1
0
votes
1
answer
83
views
How to monitor hosts with foreman when there's only one-way traffic allowed?
I am currently setting up a PoC with foreman to monitor the configuration of some hosts. This works great.
I am wondering, how could I monitor hosts in our DMZ? Where only one way traffic is allowed (...
- 101
0
votes
1
answer
129
views
Would this setup provide adequate security?
In the following scenario, I'm looking to see if I can provide adequate security as is or if there would be any tangible benefit to re-architecting things (like changing it so that the service in ...
- 103
0
votes
3
answers
497
views
How can a URL from my website be hidden?
I have my site which URL is like this: https://test.my.webpage.example
And I need to block a URL similar to: https://test.my.webpage.example/weblogic/someApp/someService
This is for a application in ...
- 11
1
vote
0
answers
359
views
access git repository from server in DMZ, accessed through VPN tunnel
My laptop mylaptop has access to a git repo mygitrepo.com.
From mylaptop I can access a web server in a DMZ dmzserver through a VPN tunnel.
Of course, dmzserver cannot directly access mygitrepo.com.
...
- 191
0
votes
0
answers
593
views
OpenVPN without NAT or DHCP
I am trying to setup an OpenVPN server similar to LiquidVPN.com. WIth their VPN server when a client connects it receives the public IP address of the server. All network traffic to the public IP is ...
- 101
0
votes
2
answers
2k
views
Do I need routers in a LAN with 2-firewall DMZ solution? [closed]
I have a LAN that will host an EXTRANET site with 5 servers, and 2 exchange edge servers. The LAN will service an office in a 5 story building with about 100-200 users on each floor. Each floor will ...
- 5
1
vote
1
answer
730
views
Dedicated IP for webserver through pfsense and a draytek 2860
We have a leased line which has 8 public IP addresses. This connects to our Draytek 2860 router.
From here we have an internal network which we use for our office computers and another network for ...
- 13
0
votes
1
answer
395
views
Run windows services with different network credentials
I have server (W2016) in DMZ, not in domain. And I need start windows services (Dynamics NAV third party application) under local account but with different network credential (domain account) for SQL ...
- 11
1
vote
1
answer
2k
views
Cisco ASA 5505 - Access to DMZ with one public IP
I am trying to configure my Cisco ASA 5505 firewall to allow access from the internet to DMZ web and mail server. I'm new to the Cisco world so excuse me if this is a newbie question. I know that this ...
0
votes
1
answer
310
views
How to setup a web ERP server that needs to be accessible outside the local network?
We have a network of servers and computers on an AD Domain. One of the servers runs a PHP based management system (ERP) and we want to have it accessible on the internet.
When I say internet I don't ...
- 125
0
votes
1
answer
692
views
Access Samba server in light "DMZ" using two Fritzbox 7390
I'm using a router cascade out of two Fritzbox 7390 to implement a light version of a DMZ. Every Fritzbox has its own subnet. Fritzbox 1 (192.168.178.0/24) is connected to the Internet Service ...
- 121
0
votes
0
answers
695
views
How to configure two firewalls for two WANs and one LAN
I have two WANs with static IPs:
DSL (PPPoA)
Fibre (Ethernet through fibre media converter)
So far I was using one firewall Vigor2830Vn to handle traffic from both WAN ports. But I need to be able ...
- 198
1
vote
4
answers
16k
views
Public IP or Private IP for the DMZ area
Lets say I have three networks in my topology : Internal network, DMZ, Internet. And my DMZ Area contains a lot of servers, but lets say in this example that it contains only a DNS Server and a Web ...
- 141
0
votes
1
answer
976
views
DMZ on Hyper-V using VLAN with fortigate
One of my customers would like to publish his HR Portal on the internet, It is a IIS website, running on a virtual machine in a Hyper-V environment.
This company has a single host, with 2 NIC paired, ...
1
vote
0
answers
286
views
Remote Desktop Jump Using Different Licence Servers
Quick overview of system:
I have a business (IT) domain and a process control network (PCN) domain joined via a pair of firewalls and a DMZ (DMZ servers part of PCN domain also). PCN domain servers ...
- 21
3
votes
0
answers
1k
views
Kubernetes - Best Practices for Physical Network Segmentation
Based on the following design constraint, does anyone have any best practices or recommendations regarding how to deploy Kubernetes across multiple network zones?
What is the most common and accepted ...
- 31
2
votes
1
answer
6k
views
AWS: Reverse Proxy to access private instance
I am looking for a best practice to set up a reverse proxy providing access to a private instance (for example a web server).
I thought it would be possible to do this:
create a VPC with one private ...
- 21
0
votes
1
answer
990
views
Pysical Server 2 NICS LAN and DMZ
I'm after some advice. I have a Physical server with 2 on-board NICs. Currently only one is used for LAN.
If I wanted to setup Hyper-V and use the second NIC for DMZ stuff, is that possible?
I ...
- 103
0
votes
2
answers
1k
views
Cisco Asa 5506 Public IP's in DMZ
I am running an ASA 5506 (9.6).
I have two IP Ranges 1.35.133.88/29 and 1.35.135.176/29.
I have setup in my router the routes.
I have an outside interface with 1.35.133.90.
I have an DMZ interface ...
- 101
11
votes
1
answer
86
views
Redundant web servers - 1 public addres
I'd like to host redundant internet accessible (NATed) web servers behind a f/w on the same standard ports. If I only have 1 publicly available address do i have to use a reverse proxy or load ...
- 111
1
vote
1
answer
680
views
pfSense DMZ VMware and Ubuntu 16.04.1 LTS
In a VMware environment I am having connectivity issues (no ping) between the gateway (pfSense DMZ) and Ubuntu server 16.04.1 LTS.
Pfsense is working fine from the LAN subnet 192.168.1.0/24 but not ...
- 11
2
votes
1
answer
14k
views
Mikrotik, block internet for specific ip but allow traffic for dmz or private network
I have Mikrotik RBcAP2n with one lan i one wlan. Wlan WiFi is for clients and Lan is for ADSL. Between MKRB and ADSL I have one server on the same network as MKRB and ADSL. Server have apache web site ...
- 35
0
votes
1
answer
2k
views
Issues with DMZ on Fortigate 90D, second router can't reach internet
I am having issues setting up a DMZ port on my Firewall (hardware router). I am also assuming this belongs in Super User, as it seems like a basic DMZ setup. Here is the setup:
I have a Fortigate 90D ...
- 101
1
vote
1
answer
124
views
Accessing internally stored documents via hyperlinks in Websites on a DMZ server
We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
- 11
-2
votes
1
answer
4k
views
I can't access my home server using my public IP from local network [closed]
I've seen this question I can't access my public IP from local network but I think it's different
I have a Vodafone Spain router from Huawei, model HG253sV2. In my local network I setup a HTTP server....
1
vote
2
answers
619
views
Get access to services outside VPN while tunneling OpenVPN Access Server
I have two VPS with one on which I installed OpenVPN Access Server and vpn client on the second one. When I connect the client to the OpenVPN AS, I can't get access to apache which is installed on the ...
1
vote
2
answers
1k
views
Hyper-V DMZ environment
Im facing some problems trying to create a DMZ virtual machine in Hyper-v.
Firstly, i want to create a DMZ so the company's smartphones can be managed remotely.We have an ESET ERA server installed, ...
- 49
0
votes
1
answer
39
views
Why is my ISP box talking to my DMZ host?
I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following
Internet - PublicIP - ...
- 3,617
1
vote
0
answers
260
views
Small business network vlans and hyper-v configuration
We are a small business and have been successfully running one Hyper-V 2012 R2 vmhost with many Windows Server 2012 VMS that includes a DC, Web Server, CRM Server and SQL Server for a couple of years. ...
- 143
0
votes
1
answer
529
views
Router configuration, subnetting, DMZ
I'd like to use a subnet of our public IP addresses in the DMZ like shown in this picture:
Does my provider have to add a routing entry on the first router for the DMZ-net? Can I assign the whole 193....
- 103
1
vote
1
answer
278
views
api connecting from WAN to LAN?
I'm not an application developer - Ill start off with that caveat.
In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
- 138
0
votes
1
answer
94
views
Test WAN access to our local area network after opening the DMZ
On our router we have recently opened a port. We want to test whether those outside our local area network are able to obtain access. How can we do this?
Unfortunately, we do not have a connection ...
- 727