Announcement

Collapse
No announcement yet.

DMZ configuration

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • DMZ configuration

    greetings!

    can you please check if im doing the right thing. i cant make my webserver work in dmz.

    dsl -> wan port router
    router -> lan port -> switch -> pcs
    router -> dmz port -> webserver lan card (public ip)

    firewall settings:
    allow traffic from any souce (*) to webserver ip

    from lan all can connect tp the internet
    from lan i can ping public my router ip and webserver ip

    from the internet i can ping my router's ip
    cannot ping webserver.. cant see website

    help

  • #2
    Re: DMZ configuration

    Originally posted by kinalas View Post
    from lan all can connect tp the internet
    from lan i can ping public my router ip and webserver ip

    from the internet i can ping my router's ip
    cannot ping webserver.. cant see website
    Try tracert webserver_ip from an Internet host. It should tell you whether the DmZ subnet is properly advertised by the ISP (because you have been allocated a subnet by your ISP, right?) The last hop before the web server should be the WAN interface on your router.

    You may also want to double check the NAT settings in the router. Make sure the router isn't NATing traffic from the DmZ zone.

    Comment


    • #3
      Re: DMZ configuration

      attached is my firewall access rule

      some notes:
      router address (lan) - 192.168.0.1
      dmz host address - 192.168.1.0

      disabled on one-to-one nat
      disabled on multiple to one nat

      your are right i got 3 public ips but it works fine because at present:
      121.96.207.1 - router's public ip
      121.96.207.2 - webserver ip (but outside of the router)
      121.96.207.3 - pointed to another router
      Attached Files

      Comment


      • #4
        Re: DMZ configuration

        Originally posted by kinalas View Post
        dmz host address - 192.168.1.0
        That doesn't look like a host address, it looks like the network address of a /24 network.

        If I understand you correctly, you have a separate DmZ segment and with to statically NAT a host in that network behind a dedicated, external address.

        I didn't see any NAT rules in the screenshot you posted. What make and model is your router?

        Comment


        • #5
          Re: DMZ configuration

          Its a qno qvf7303
          Its the default dmz host address

          Comment


          • #6
            Re: DMZ configuration

            Originally posted by kinalas View Post
            Its a qno qvf7303
            Its the default dmz host address
            I think you mean it's the default LAN network. At least it is according to page 24 of the manual.

            According to page 41, the DmZ functionality on the QVF7303 allows a host in the same subnet as the WAN interface to be connected to a DmZ port. If you manually configure the web server with the correct public IP address and then follow the procedure on page 41 to configure the router, it should work.

            Comment


            • #7
              Re: DMZ configuration

              here are some other settings on the router
              Attached Files

              Comment

              Working...
              X