How to setup DMZ

Question

I searched the user bulletin board for the word DMZ and got 0 results. There must something wrong with the search function. I also searched V7 Admin guide and it didn't explain how to do this. I have a 3rd network card in my Astaro v7. What setting to I need to make a DMZ?

--Scott

This thread was automatically locked due to age.

Jhaislet · Answer

If you don't want the DMZ having access to your internal network (which, after all, why setup a DMZ if it's essentially going to be second local network), then you need to add a packet filter that DROPS all traffic from the DMZ to the internal network, and put this filter at the TOP of the list (e.g. #1).  Network Security > Packet Filter > Added new filter: Source=DMZ (Network), Service=Any, Destination=Internal Network, Action=DROP  You will still be able to access (from the internal network), any resources you have connecting through the DMZ network, but the DMZ will ONLY then have access to the internet and NOT to your internal network.  If this is not what your wanting to do, then simply setup the interface for your access point as just a standard 3rd interface (which you've already done) and add the appropriate packet filters and masq rules.