Skip to main content

DMZ setup

More
17 years 10 months ago #19794 by skylimit
DMZ setup was created by skylimit
Hi all, i'm trying to put my host machine in the DMZ but not quite sure which IP address to use. I use a belkin wireless router and on the config page im presented with a page displaying:


|Static IP | Private IP
|w.y.z.1 | 192.168.2.X

My host IP is 192.168.2.8 and my range of IP is .2 -.20

My problem is that at the moment the host i want to use is setup up to obtain IP automatically therefore has an IP of 192.168.2.8.. Now what number do i enter for the last digit (for X) above so that i have a static IP for that host in the DMZ. is it gonna be 8 (from my IP assigned by DHCP) or any other digit within the range? any response will be appreciated. many thanks in advance

"...you are never too old to learn" anon
More
17 years 10 months ago #19795 by Smurf
Replied by Smurf on topic Re: DMZ setup
You will have to configure your Host's IP Address to be a Static Address otherwise if that address changes you will need to keep changing the value of x.

What it will in affect do is pass all traffic that hits the Static IP interface (which is your external IP Address of you router) and pass all traffic to the Private IP Address therefore creating your DMZ machine.

I have edit your post and remove the Static IP address, substituted a few of the numbers for letters so no-one knows your ip address and tries to hack ya.

Cheers

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 10 months ago #19797 by skylimit
Replied by skylimit on topic Re: DMZ setup
thanks for changing the IP so you mean i should untick 'obtain IP automatically..' in network connections... and tick the 'use the following Ip addresses box'. and the IP entered say 192.168.2.4 must be same as that entered in my router DMZ config page. thanks

Ps: is there a way to confirm that i have set this up correctly?

"...you are never too old to learn" anon
More
17 years 10 months ago #19801 by Smurf
Replied by Smurf on topic Re: DMZ setup
Yes, that should work. If your router has firewall capabilities (most have) then you may need to then start allowing ports to be passed through.

The only way to test is to try accessing it from outside the network.

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
More
17 years 10 months ago #19875 by skylimit
Replied by skylimit on topic Re: DMZ setup

Yes, that should work. If your router has firewall capabilities (most have) then you may need to then start allowing ports to be passed through.

The only way to test is to try accessing it from outside the network.


Hi, I tried what u told me about setting up a DMZ but for some reason it didnt work because i tested it by trying to access my machine outside the network but couldnt (zonealarm firewall on my machine was on..). Also i set a static ip for my machine but the following day my a message appeared on my house mates pc saying "address conflict..." ie the static ip i set (network connectioins > TCP/IP > untick obtain IP address automatically was assigned by DHCP to another host. How can this be resolved? DO i have to manually configure static IP on all hosts in the home network or what? responses will be appreciated.

PS: Is it possible to set a static ip (my private IP) in the router dmz config page without changing TCP/IP settings ie (unticking automatically obtain IP > enter IP, netmask etc..) on my machine in order to set a static IP?

"...you are never too old to learn" anon
More
17 years 10 months ago #19878 by Smurf
Replied by Smurf on topic Re: DMZ setup
Sorry but i don't know anything about the belkin wireless routers. I know that most of them have the DMZ functionality which basically allows you to select a machine on the inside network that all traffic will be routed to (translated to) if it hits the external interface.

Sorry i cannot help ya further, hopefully some members are familary with these routers and can help ya out.

CHeers

Wayne

Wayne Murphy
Firewall.cx Team Member
www.firewall.cx

Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Time to create page: 0.129 seconds