3 ms·
? I'm curious, because I'm not following you. At least in simple home-networking terminology, wouldn't that be nearly equivalent to putting your device outsid
by Splines 16y ago
? I'm curious, because I'm not following you. At least in simple home-networking terminology, wouldn't that be nearly equivalent to putting your device outside your firewall? You put a device that doesn't play well with your NAT into a DMZ, losing the passive security of the NAT in exchange for getting the device to work.
- bradleyland 16y agoIn "simple home-networking terminology," you're correct. Most consumer-grade routers misuse the "DMZ" term and aren't capable of creating a "real" DMZ, but if I had to guess, the author isn't using a typical consumer-grade router or network. For anyone curious about what a "real" DMZ is: A DMZ doesn't always mean "wide open". It means that you create a separate network with a hard break between the DMZ network and your "trusted" network. You can, and should, firewall your DMZ network at the internet facing side as well. The stack looks something like this: <internet>---<firewall>---<DMZ> \--<firewall>---<trusted> Or <internet>---<firewall>---<DMZ>---<firewall>---<trusted> Wikipedia actually has some good information that is understandable to anyone who can interpret basic networking diagrams. http://en.wikipedia.org/wiki/DMZ_(computing) http://en.wikipedia.org/wiki/DMZ_(computing)
- ra 16y agoThst's right. It's still firewalled from the Internet, but now also firewalled from the rest of my LAN.