Differences

This shows you the differences between two versions of the page.

--- forward-dmz [2023/06/24 18:15] – hogwild
+++ forward-dmz [2024/11/27 01:48] (current) – hogwild
@@ Line 1: / Line 1: @@
 ===== DMZ =====
-On a more sophisticated network, the DMZ (Demilitarized Zone) is a specific area of the network where services are provided in a secure way. However, in FreshTomato, DMZ has a more simple effect. When enabled, all unknown ports on FreshTomato's WAN are forwarded to the defined DMZ host IP, instead of each being dealt with individually. Consider DMZ a "lazy" and potentially dangerous approach to port forwarding, due to the large security hole it opens.
+On a sophisticated network, the DMZ (Demilitarized Zone) is a specific area of the network where services are provided in a secure way. However, in FreshTomato, DMZ has a simpler effect. When enabled, all unknown ports on FreshTomato's WAN are forwarded to the defined DMZ host IP address, instead of each being dealt with individually.
- \\
- \\
-**Enable DMZ**: This turns the DMZ function on or off.
-**Destination Address**: This is the LAN IP address of the device meant to receive all these forwarded ports.
+Since it opens a large security hole, consider DMZ a "lazy" and potentially dangerous approach to port forwarding. You are advised to use other port forwarding methods before resorting to DMZ.\\   \\ **Enable DMZ**: turns on or off the DMZ function.
  \\
-[[https://wiki.freshtomato.org/lib/exe/detail.php?id=dmz&media=c3eb8300c295e4230ec42a93d23e3aeb.png|{{:c3eb8300c295e4230ec42a93d23e3aeb.png}}]]
+**Destination Address**: the LAN IP address of the device to receive all these forwarded ports.
  \\
-**Destination Interface**: This is the VLAN/bridge where the above host can be found.
+[[https://wiki.freshtomato.org/lib/exe/detail.php?id=dmz&media=c3eb8300c295e4230ec42a93d23e3aeb.png|{{:c3eb8300c295e4230ec42a93d23e3aeb.png?621}}]]
-**Source Address Restriction**: If specified, this will limit DMZ activity to the defined source IP address range. The Default is empty, which means ports from any address or range will be forwarded.
+ \\
-**Leave Remote Access**: If enabled, this will force SSH (TCP port 22) and HTTP (TCP port 443) traffic to always be answered by the FreshTomato router, regardless of DMZ settings.
+**Destination Interface**: this is the VLAN/bridge where the above host can be found.
-\\
+ \\
+**Source Address Restriction**: if entered, limits DMZ activity to the defined source IP address range.
+The Default is empty, which means ports from any address/range will be forwarded.
  \\
+**Leave Remote Access**: if enabled, forces FreshTomato to always answer SSH (TCP/22) and HTTP (TCP/443) traffic, regardless of DMZ settings.
+\\  \\  \\

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools