Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Configuring a DMZ

Posted on 2004-11-02
3
Medium Priority
?
306 Views
Last Modified: 2010-04-09
Helloo all !

I need to configure a DMZ with a Zywall 35.

I have a public IP 212.xxx.xx.xx.

My LAN is now with Private IP in Class A (10.10.1.1 and 255.0.0.0)

I want to put a server (10.10.1.7) in the DMZ but I don't understand how to configure my firewall ?

I need to do a NAT it seems ! Perhaps put this server on an other network like 10.10.2.7 ?

What about the subnet ?

Thanks a lot

Gaël
0
Comment
Question by:s2000_com
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 9

Expert Comment

by:TannerMan
ID: 12472877
It needs to be a different subnet. your mask of 255.0.0.0 means everything 10.x.x.x is on the same network.
Setup your DMZ as something like 172.16.1.x or 192.168.1.x utilizing a 255.255.255.0 mask
As far as the config of Zywall, I can't help. Wish you luck with it.
0
 

Author Comment

by:s2000_com
ID: 12481100
Thanks TannerMan !

I have only one public IP.

If I put the webserver and the exchange front-end serveur in the DMZ, how many public IP I need ?

Thanks
0
 
LVL 9

Accepted Solution

by:
TannerMan earned 750 total points
ID: 12482299
I am not a Zywall guru, but you need only ONE external IP address. Then, inside of Zywall you would do port mapping like.........

port 80/443 goes to 172.168.16.2 (web server)
ports 25/110 goes to 172.16.3 (exchange server)

and so on.....
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
Suggested Courses

609 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question