Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 2714 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Completely Open DMZ?

K L

Normally on our router, we would just specify an IP address and voila, all the ports are completely

open to the internet.. This helps us in testing the device and actually we want it exposed to the internet 

completely.. (think honeypot) or just hardening testing.. 

 

1 static IP IP (WAN)46.x.x.x  eth0 (pppoe) 

1 local net (LAN) 192.168.1.x/24 behind it.. eth1

 

I just want whatever arrives (all ports) @ 46.x.x.x.x wan to be forward to 192.168.1.88 without being molested or touched..

 

Suggestions Welcome 

Thanks



This thread was automatically locked due to age.
  • 0

    Hi K L,

    There are two ways to do this, one complex but what this system is designed to do and the other is quick fix:

    1. Bridge an unused interface to your WAN interface and remove the applicable WAN IPs then provide one of those IPs to your server that you want to have direct unfettered access to the internet. There's a teensy bit more but that's the general gist
    2. Set up a DNAT in Network Protection > NAT > NAT Tab with the settings of
      1. Source: Internet IPV4
      2. Services: Any
      3. Destination: Additional Address you want to forward
      4. Change Destination to: Internal IP Address of "DMZ" Server
      5. Leave Destination port as blank
      6. Automatic Firewall rule

    What the the second option will do is just forward all traffic to that internal IP address and is the quick fix. I prefer doing the first option as it's much more efficient but is much more complex.

    One thing to note is that on other appliances that have a "DMZ" setting for devices is just a fancy name for the DNAT option explained in option 2 above :)

    Emile

Unfiltered HTML