FreshTomato Wiki

User Tools

Site Tools

Trace: • basic-ipv6 • tools-trace • forward-triggered • tools-ping • advanced-misc • advanced_scenarios • advanced-mac • speedtest • status-overview • clearing_iptables
forward-dmz

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
forward-dmz [2024/10/09 22:57] – -Resize screenshot to 621x214 hogwildforward-dmz [2024/11/27 01:48] (current) – hogwild
Line 3: Line 3:
 On a sophisticated network, the DMZ (Demilitarized Zone) is a specific area of the network where services are provided in a secure way. However, in FreshTomato, DMZ has a simpler effect. When enabled, all unknown ports on FreshTomato's WAN are forwarded to the defined DMZ host IP address, instead of each being dealt with individually. On a sophisticated network, the DMZ (Demilitarized Zone) is a specific area of the network where services are provided in a secure way. However, in FreshTomato, DMZ has a simpler effect. When enabled, all unknown ports on FreshTomato's WAN are forwarded to the defined DMZ host IP address, instead of each being dealt with individually.
  
-Since it opens a large security hole, consider DMZ a "lazy" and potentially dangerous approach to port forwarding. You are advised to use other port forwarding methods before resorting to DMZ.\\   \\ **Enable DMZ**: This turns the DMZ function on or off.+Since it opens a large security hole, consider DMZ a "lazy" and potentially dangerous approach to port forwarding. You are advised to use other port forwarding methods before resorting to DMZ.\\   \\ **Enable DMZ**: turns on or off the DMZ function.
  
  \\  \\
  
-**Destination Address**: The LAN IP address of the device to receive all these forwarded ports.+**Destination Address**: the LAN IP address of the device to receive all these forwarded ports.
  
  \\  \\
Line 15: Line 15:
  \\  \\
  
-**Destination Interface**: This is the VLAN/bridge where the above host can be found.+**Destination Interface**: this is the VLAN/bridge where the above host can be found.
  
  \\  \\
  
-**Source Address Restriction**: If entered, this limits DMZ activity to the defined source IP address range.+**Source Address Restriction**: if entered, limits DMZ activity to the defined source IP address range.
  
 The Default is empty, which means ports from any address/range will be forwarded. The Default is empty, which means ports from any address/range will be forwarded.
Line 25: Line 25:
  \\  \\
  
-**Leave Remote Access**: If enabled, this forces SSH (TCP port 22) and HTTP (TCP port 443) traffic to always be answered by the FreshTomato router, regardless of DMZ settings.+**Leave Remote Access**: if enabled, forces FreshTomato to always answer SSH (TCP/22) and HTTP (TCP/443) traffic, regardless of DMZ settings.
  
-\\ +\\  \\  \\
- +
- \\+
  
  
forward-dmz.1728511065.txt.gz · Last modified: by hogwild

Page Tools

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki