Community discussions

MUM Europe 2020
 
X9X0
just joined
Topic Author
Posts: 4
Joined: Fri Jul 16, 2004 9:42 pm
Location: North Providence, RI

Such Thing as DMZ??

Sun Jul 18, 2004 7:21 am

Is anyone aware of a way to set up a DMZ host? Basically let one or more specified host to be 100% open and accessable to all ports and services on the public interface.
 
Bill
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri May 28, 2004 4:24 pm
Location: Nevada

Sun Jul 18, 2004 10:48 am

There are several ways. If you have enough IP addresses, you can plug the server and MT box into a switch that connects to the feed from the upstream provider. You can also setup 1:1 NAT so that all traffic headed to one of the Public IP's on the MT box is routed to the server. You could also put in a bridge interface and put a Public IP on the server. The first method would require a software firewall, since the server would be fully exposed to the internet. With the other methods, you could put rules into the MT firewall to protect the server.
 
User avatar
lastguru
Trainer
Trainer
Posts: 435
Joined: Fri May 28, 2004 9:04 pm
Location: Certified Trainer/Consultant in Riga, Latvia
Contact:

Sun Jul 18, 2004 11:16 am

And of course the most like correct method is to ask the provider to route some real IP addresses behind your router for the DMZ, so you could route thaem to the actual computers.
International MikroTik Certified Trainer and Consultant form Latvia.
I do RouterOS Training and Certification worldwide!

skype: lastguru
 
User avatar
Eugene
Forum Veteran
Forum Veteran
Posts: 993
Joined: Mon May 31, 2004 5:06 pm
Location: Cranfield, UK

Mon Jul 19, 2004 2:17 pm

Who is online

Users browsing this forum: Bing [Bot] and 38 guests