Questions tagged [dmz]

In computer security, a DMZ or demilitarized zone (sometimes referred to as a perimeter network) is a physical or logical subnetwork that contains and exposes an organization's external-facing services to a usually larger and untrusted network, usually the Internet.

12 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
2answers
559 views

tunnelling HTTP request through DMZ from a secured area

In my topology I have a secured area where all the servers are. There is also a DMZ with a few reverse proxy servers. I now need to make one of the servers in the secure area open to make HTTP calls ...
1
vote
0answers
76 views

Is there any value in using macvlan/VLANs to create router aware networks to segment internet exposed containers vs non exposed containers?

I have a single home server with a single NIC. I intend to run numerous Docker containers -- some will be internet exposed, some will not. The way I see it, I have two options: Use the normal bridge ...
1
vote
0answers
82 views

Left port 80 exposed, several IPs accessed phpmyadmin

A few days ago while messing around with a web server, I put my server into a DMZ via my router and forgot to disable it. I opened port 80 and 3306 on the server's firewall (Windows Server) to access ...
1
vote
0answers
64 views

Is it best to have HIPAA data pushed to me or to pull it and how do those solutions differ from an infrastructure and security perspective?

Long time reader first time asking. I have HIPAA data I need to get from point A to point B. Point A can either securely host the file to be pulled by Point B or push the data to Point B. I am ...
1
vote
0answers
217 views

Sql Server access from DMZ

I'm developing a B2B website open to the internet. I've deployed the website on an application server that is in its own network and is only allowed to communicate to the intranet on two ports: To ...
1
vote
0answers
887 views

LDAP (Active Directory) Authentication from DMZ

I have a web application hosted in a DMZ on a non-domain server. The app is primarily an intranet site, but also needs to be available publicly. The app authenticates users using LDAP to the internal ...
1
vote
0answers
692 views

Port forwarding and DMZ not working

Am trying to run a tor-relay on my raspberry-pi. I have a static IP configured on my pi and enabled the tor service. But when I tried to do port forwarding for my pi's static ip on my ORport, it is ...
1
vote
0answers
90 views

Simple DMZ Question Regarding Physical Hardware

So when talking about at setting up a DMZ, if you are currently running a web server, app server, and a database server on the same physical host, you need to migrate them to separate physical hosts ...
0
votes
0answers
31 views

Do i place this service in the DMZ or datacentre(internal)?

I have setup a VM on our internal network and it is assigned an internal IP address. The VM requires connectivity to a couple of internet sites mainly Microsoft and ports are generally 80 and 443. ...
0
votes
0answers
139 views

Database in DMZ and SMTP relay

I have an application that talks with a database in the DMZ. There is a firewall between the apps and the db but our developer thought that they require a mail notification that is triggered from the ...
0
votes
1answer
487 views

Relying on internal DNS server (Domain Controller) on a DMZ Server

A couple of questions regarding DNS traffic between TRUST and DMZ and best practices. Are there any significant risks in relying on internal DNS from a web server hosted in a DMZ zone? Has the DNS ...
0
votes
1answer
679 views

DMZ to Virtualbox VM with pfSense

It is safe to make a DMZ to a VirtualBox VM that has pfSense installed with two network cards one on bridge and one on intnet. The DMZ would do this by indicating the ip of pfSense to the router. ...