Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: DMZ setup

DMZ setup 9 years 7 months ago #19794

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
Hi all, i'm trying to put my host machine in the DMZ but not quite sure which IP address to use. I use a belkin wireless router and on the config page im presented with a page displaying:


|Static IP | Private IP
|w.y.z.1 | 192.168.2.X

My host IP is 192.168.2.8 and my range of IP is .2 -.20

My problem is that at the moment the host i want to use is setup up to obtain IP automatically therefore has an IP of 192.168.2.8.. Now what number do i enter for the last digit (for X) above so that i have a static IP for that host in the DMZ. is it gonna be 8 (from my IP assigned by DHCP) or any other digit within the range? any response will be appreciated. many thanks in advance
"...you are never too old to learn" anon
The administrator has disabled public write access.

Re: DMZ setup 9 years 7 months ago #19795

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
You will have to configure your Host's IP Address to be a Static Address otherwise if that address changes you will need to keep changing the value of x.

What it will in affect do is pass all traffic that hits the Static IP interface (which is your external IP Address of you router) and pass all traffic to the Private IP Address therefore creating your DMZ machine.

I have edit your post and remove the Static IP address, substituted a few of the numbers for letters so no-one knows your ip address and tries to hack ya.

Cheers
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: DMZ setup 9 years 7 months ago #19797

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
thanks for changing the IP so you mean i should untick 'obtain IP automatically..' in network connections... and tick the 'use the following Ip addresses box'. and the IP entered say 192.168.2.4 must be same as that entered in my router DMZ config page. thanks

Ps: is there a way to confirm that i have set this up correctly?
"...you are never too old to learn" anon
The administrator has disabled public write access.

Re: DMZ setup 9 years 7 months ago #19801

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Yes, that should work. If your router has firewall capabilities (most have) then you may need to then start allowing ports to be passed through.

The only way to test is to try accessing it from outside the network.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.

Re: DMZ setup 9 years 7 months ago #19875

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
Yes, that should work. If your router has firewall capabilities (most have) then you may need to then start allowing ports to be passed through.

The only way to test is to try accessing it from outside the network.

Hi, I tried what u told me about setting up a DMZ but for some reason it didnt work because i tested it by trying to access my machine outside the network but couldnt (zonealarm firewall on my machine was on..). Also i set a static ip for my machine but the following day my a message appeared on my house mates pc saying "address conflict..." ie the static ip i set (network connectioins > TCP/IP > untick obtain IP address automatically was assigned by DHCP to another host. How can this be resolved? DO i have to manually configure static IP on all hosts in the home network or what? responses will be appreciated.

PS: Is it possible to set a static ip (my private IP) in the router dmz config page without changing TCP/IP settings ie (unticking automatically obtain IP > enter IP, netmask etc..) on my machine in order to set a static IP?
"...you are never too old to learn" anon
The administrator has disabled public write access.

Re: DMZ setup 9 years 7 months ago #19878

  • Smurf
  • Smurf's Avatar
  • Offline
  • Moderator
  • Posts: 1390
  • Karma: 1
Sorry but i don't know anything about the belkin wireless routers. I know that most of them have the DMZ functionality which basically allows you to select a machine on the inside network that all traffic will be routed to (translated to) if it hits the external interface.

Sorry i cannot help ya further, hopefully some members are familary with these routers and can help ya out.

CHeers

Wayne
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
The administrator has disabled public write access.
Time to create page: 0.081 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup