4 ms·
Was hoping to see some ideas on how to create a DMZ and it still being accessible locally. A use case would be to host internet facing applications at home and
by marderfarker2 5y ago
Was hoping to see some ideas on how to create a DMZ and it still being accessible locally.
A use case would be to host internet facing applications at home and still be safely consumed locally.
- cmeacham98 5y agoI mean, the simple solution is to just access your DMZ via its public IP address. Alternative solution is to firewall traffic from the DMZ to the rest of the LAN but allow LAN to DMZ.
- carlhjerpe 5y agoFor TCP this is simple, only allow new connections in one direction. The better way is to separate networks by vrf, ensuring packets take the right path and go through your dnat rules without possible shortcuts (firewall separation works too, but then you're at the mercy of not fat-fingering any rules)