|
|
本帖最后由 monirkhanrrr8 于 2023-7-9 20:46 编辑
At RedesZone we have already explained in detail what DMZ is, what it is used for and how to use it on our router.
Recently in the new Orange routers, both Fiber Livebox, Livebox Plus and the company's hybrid China Email List router called Livebox Evolution, we have a very interesting configuration when configuring the DMZ, and it is not necessary to put a fixed IP on the peripheral terminal, but we can open the DMZ directly with the MAC address of the device.
As you all know, DMZ, or also known as demilitarized zone, is an option that all home routers come with to facilitate opening all ports on a given device. This option was created so that any computer on the Internet can communicate with a computer behind NAT, allowing all ports to be opened on that device except ports that are explicitly open to other computers.
Open DMZ from IP
Currently, all routers allow the DMZ to open on a specific computer, using the private IP address of that device. As we have a DHCP server on the local network, it is possible that the IP address of the device on which we opened the DMZ will change, and therefore we will open the DMZ on another computer that is not there. This leads to two issues, the first is security, that is, if the device does not have a firewall, it may receive unwanted traffic from the Internet. If, for example, we have services like FTP or SSH, they would be easily accessible over the Internet and without us realizing it, as if we had made an explicit port forwarding to these services. The second problem is that the device that was in the DMZ is no longer there, so we won't be able to use its services externally.
What you should always do if you want to open the DMZ on a specific computer is to put a static IP address on the device. This is done in two main ways:
Manually configure the fixed private IP address on the device, in the LAN subnet area and outside the DHCP area, so that there is no conflict of any kind. The DHCP server could provide the same static IP to a computer on the same network, so we will have two identical IPs on the same subnet, and this cannot be done.
|
|
发表于 2023-7-9 20:44:36