Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dmz]

In computer security, a DMZ, or demilitarized zone is a physical or logical subnetwork that contains and exposes an organization's external services to a larger untrusted network, usually the Internet. The term is normally referred to as a DMZ by information technology professionals. It is sometimes referred to as a perimeter network.

1
vote
2answers
492 views

Get access to services outside VPN while tunneling OpenVPN Access Server

I have two VPS with one on which I installed OpenVPN Access Server and vpn client on the second one. When I connect the client to the OpenVPN AS, I can't get access to apache which is installed on the ...
0
votes
2answers
557 views

Cisco Asa 5506 Public IP's in DMZ

I am running an ASA 5506 (9.6). I have two IP Ranges 1.35.133.88/29 and 1.35.135.176/29. I have setup in my router the routes. I have an outside interface with 1.35.133.90. I have an DMZ interface ...
0
votes
2answers
1k views

tunnel port 8080 over jumpserver using ssh - socks5 proxy?

I have this setup: LocalPC - Jumpserver - Webserver with page only accessible on this machine via localhost:8080 LocalPC and Webserver are not connected - Jumpserver has to be used. Jumpserver ...
0
votes
2answers
574 views

SSL certs or intermediate for DMZ

I've been tasked with deploying and managing load balancers covering internal servers and DMZ servers. I have no experience with this, and this is a first for my organization as well. Balancers are up,...
0
votes
2answers
730 views

Port Forwarding failing only to Ubuntu servers from Draytek router

I know this is a kinda unusal question, but Draytek support (..which is very eager to solve the issue) seems to reach its limits. Scenario: Draytek Vigor Multiwan router with current firmware. ...
2
votes
1answer
302 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every non-...
1
vote
1answer
475 views

pfSense DMZ VMware and Ubuntu 16.04.1 LTS

In a VMware environment I am having connectivity issues (no ping) between the gateway (pfSense DMZ) and Ubuntu server 16.04.1 LTS. Pfsense is working fine from the LAN subnet 192.168.1.0/24 but not ...
1
vote
1answer
40 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
1answer
753 views

How to make Docker resolve DMZ host?

Imagine I have this setup: An application server Private IP: 1.0.0.1; Private hostname: machine1.internal.domain Public IP : 2.0.0.1; Public hostname : machine1.example.com A ...
1
vote
1answer
848 views

Setting up a new DMZ for Web Servers

When it comes to security, VLAN ACL's, firewall DMZ policy and the like I am a Newb. So any help will be appreciated. We are trying to architect our network to place all of our web accessible ...
1
vote
1answer
606 views

iptables: Allowing only established outgoing connections like DMZ

I want to simulate a DMZ like scenario where server1(inside DMZ, 10.1.1.0) should be able to respond to any incoming connection and cann't make a new outgoing connection on its own. I would ...
1
vote
1answer
738 views

API exposing services running on LAN to serve website in DMZ

I have a team of developers who are writing both an intranet and external website. The website consists of two servers and a load balancer, inside a DMZ. The DMZ has a pinhole open to the LAN (http/...
1
vote
1answer
392 views

DMZ setup and firewall throughput limit

I am in the process of moving server room into the datacenter and it is a good time to review current setup for security zones.We are using Vsphere 4 Standard and Cisco ASA 5510 firewall. At the ...
0
votes
1answer
68 views

Run windows services with different network credentials

I have server (W2016) in DMZ, not in domain. And I need start windows services (Dynamics NAV third party application) under local account but with different network credential (domain account) for SQL ...
0
votes
1answer
612 views

Cisco ASA 5505 - Access to DMZ with one public IP

I am trying to configure my Cisco ASA 5505 firewall to allow access from the internet to DMZ web and mail server. I'm new to the Cisco world so excuse me if this is a newbie question. I know that this ...
0
votes
1answer
249 views

DMZ on Hyper-V using VLAN with fortigate

One of my customers would like to publish his HR Portal on the internet, It is a IIS website, running on a virtual machine in a Hyper-V environment. This company has a single host, with 2 NIC paired, ...
0
votes
1answer
33 views

Why is my ISP box talking to my DMZ host?

I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following Internet - PublicIP - ...
0
votes
1answer
2k views

Accessing files located on the file server from the DMZ

I need to set in place a new ASP.NET MVC solution where authenticated users can download files (originally located on the internal network). For security reasons, accessing internal network from the ...
0
votes
1answer
912 views

Ubuntu server - NIC suddenly loses connectivity

I'm scratching my head. I recently configured a server with two identical Intel NICs inside a DMZ. This morning at around 8:05, I successfully SSH'd in through the internal interface (via my LAN-based ...
0
votes
1answer
643 views

VMWare Workstation and network isolation

When I install VNC or some other RAT to a container in my VMWare Workstation machine box, what ways can I prevent access to my local network and other machines on my network. Is this where setting up ...
0
votes
1answer
660 views

Combine two NIC's into one preserving routing (DMZ server / Windows or Linux)

We have a DMZ server with two NIC's, one is accessed from the Internet (public IP) and one from behind the internal firewall (private IP). One application has problems to cope with a 2 IP's / 2 NIC's ...
-1
votes
1answer
828 views

Pfsense edge firewall .. DMZ … pfsense internal firewall + squid

i want to setup Pfsense on edge .. DMZ .. Internal PFSENSE with squid + squid Guard + lighttp for reporting... Internal Network. edge firewall will have 2 wans on loadbalancing & failover. ...
-1
votes
1answer
625 views

FTP in DMZ, TCP Ports for LDAP Auth

szenario: (outside)---(ASA5510)---(inside) ->Windows2008 DC .....................(dmz) ..........->Win2008 FTP Server Which Ports do I need to open from DMZ->Inside that FTP Users can ...
3
votes
0answers
692 views

Kubernetes - Best Practices for Physical Network Segmentation

Based on the following design constraint, does anyone have any best practices or recommendations regarding how to deploy Kubernetes across multiple network zones? What is the most common and accepted ...
3
votes
0answers
6k views

Allowing LDAP authentication from DMZ to Active Directory. Is my idea secure?

I have a internet-facing application server that I want to use AD authentication. This is my first time doing this for a none MS application or without some sort of proxy. I already have a idea in my ...
2
votes
0answers
628 views

Deploying a ASP.Net WebAPI website and DMZ

I have a set of RESTful services developed using ASP.Net WebAPI which is a single project. I handle authentication via ASP.Net's built in Forms Authentication (cookie based) mechanism which is also ...
1
vote
0answers
19 views

access git repository from server in DMZ, accessed through VPN tunnel

My laptop mylaptop has access to a git repo mygitrepo.com. From mylaptop I can access a web server in a DMZ dmzserver through a VPN tunnel. Of course, dmzserver cannot directly access mygitrepo.com. ...
1
vote
0answers
81 views

Remote Desktop Jump Using Different Licence Servers

Quick overview of system: I have a business (IT) domain and a process control network (PCN) domain joined via a pair of firewalls and a DMZ (DMZ servers part of PCN domain also). PCN domain servers ...
1
vote
0answers
180 views

Small business network vlans and hyper-v configuration

We are a small business and have been successfully running one Hyper-V 2012 R2 vmhost with many Windows Server 2012 VMS that includes a DC, Web Server, CRM Server and SQL Server for a couple of years. ...
1
vote
0answers
648 views

The remote procedure call failed during applying Remote Access Setup Wizard Settings

I have a DirectAccess server with Windows Server 2012 R2 in the DMZ and other services such as Active Directory (located on a subdomain) and the PKI infrastructure in the internal area. And I get ...
1
vote
0answers
853 views

Security considerations for AD one way trust from DMZ to corporate LAN

I am a Sharepoint developer and have been asked to deploy a Sharepoint server within a DMZ which will be accessed from a corporate LAN. Currently the DMZ has public IP's (which are protected by a ...
1
vote
0answers
730 views

Separating Secure Network and DMZ (nonsecure) in a PCI Compliant Infrastructure

We are setting up a PCI Compliant infrastructure where most of our applications are running in a DMZ (demilitarised zone) that contain no sensitive information. The part that contains sensitive ...
0
votes
0answers
57 views

OpenVPN without NAT or DHCP

I am trying to setup an OpenVPN server similar to LiquidVPN.com. WIth their VPN server when a client connects it receives the public IP address of the server. All network traffic to the public IP is ...
0
votes
0answers
90 views

TLS check failing because of Cert for exchange

I have an on-premise exchange 2016 environment. There is an internal exchange server (on the domain) and a server in the DMZ that is not on the domain that is running the Edge Transport service. ...
0
votes
0answers
30 views

OpenSSH with OATH from WAN and without from LAN

I have placed a simple ARM based Debian machine in a DMZ and I would like to set up an SSH proxy into my network. To do this, I would like to require anybody connecting from the WAN to provide a key ...
0
votes
0answers
222 views

How to configure two firewalls for two WANs and one LAN

I have two WANs with static IPs: DSL (PPPoA) Fibre (Ethernet through fibre media converter) So far I was using one firewall Vigor2830Vn to handle traffic from both WAN ports. But I need to be able ...
0
votes
0answers
86 views

How to forward https request to internet

I have one web server need access internet web service such as https://example.com/cgi-bin/* and this server deployed in intranet and also have one DMZ server can access internet directly. So, how to ...