• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

I want to run a server from home..

SoundTheSurrender

Diamond Member
Can I use DMZ safely if I have a wireless router and a regular router?


The way I'd do it is make the wireless router within the network and the regular router connected to the modem. Is that possible?


Wireless Router --> Regular Router --> Internet

The only way I know it's possible of running a server is in DMZ mode unless there are alternatives.

Thanks.
 
It can e done, here is the principle, http://www.ezlan.net/shield.html

However Server on the DMZ means that the server is directly on the Internet, which is Not safe, and that all the ports pointing to it, thus No ports forwarding would be available elsewhere in your Network.

It unusual to put a server in the DMZ. The common practice is to open the server's software working ports through the Router's Firewall.
 
Why two routers? Are you suggesting setting up DMZ on one router and not the other one? That will still block access to anyone from the outside...

What you want to do is use one router and selectively forward ports to the server. If you were running a web server, for example, you would forward port 80. If you wanted to enable remote logins over ssh you would forward port 22 - but if you did that you would have to make sure you had strong passwords.

DMZ is very rarely a good idea.
 
Alright thanks.

So if I forwarded port 80 on my server how does the internet know that it's a server? For example when I went into DMZ mode, I found out the IP address via ipconfig and asked my friend to type that IP in and it got pointed to my website.

I thought all computers had port 80 open to use web access. I'm not clear with this part. What do I do to differentiate my computer which is not a webserver with a computer that is a webserver on my router.
 
you forward port 80 on the router so unsolicited http traffic seen on the internet facing interface is forwarded to a specific ip address. in your case, it would be the static private ip address of your web server.

a port doesnt have to be open for an inside computer to use it since you're NATing from a trusted interface to an untrusted interface.

http://www.ezlan.net/routers1.html
http://portforward.com/
 
So if I forwarded port 80 on my server how does the internet know that it's a server?

You point people do it. From a network standpoint servers are no different from workstations, the only real difference is that they offer services on certain ports. If you want to know about DNS hosting and such that's another issue.

I thought all computers had port 80 open to use web access.

You connect outbound to port 80 to connect to a website, it doesn't connect to you.

I'm not clear with this part. What do I do to differentiate my computer which is not a webserver with a computer that is a webserver on my router.

Read up on basic TCP/IP. The only difference between a webserver and a non-webserver is that one has webserver software running on it and the other doesn't.
 
Sounds like you need to read a bit more about the net and the web before doing this... I'll have a go at explaining though.

Originally posted by: SoundTheSurrender
So if I forwarded port 80 on my server how does the internet know that it's a server?

The internet doesn't 'know' anything - its just a collection of computers, it is not centralised in any way. The only difference between a computer which is a server, and one which is not a server, is what programs it is running.

When you type an address (IP or URL) into Firefox or IE it asks the computer on the other end if it is running a web server program on port 80. If it is, the server will then return index.html (or whatever) to the client, and that page will be rendered in the browser. If not, it will reject the request.

For example when I went into DMZ mode, I found out the IP address via ipconfig and asked my friend to type that IP in and it got pointed to my website.

Yep - even if you weren't using DMZ or running a server of any kind your IP would still point to you.

Basically your router is running something called NAT (look it up) which means it is the only computer on your network which can directly be seen from the outside. It is the edge or border of your little network. Anything which want to go to your server has to get through the router first.

I thought all computers had port 80 open to use web access. I'm not clear with this part.

No - ports are a way *in* to a computer not out. You only need ports open on a computer if that computer is to act as a server.

What do I do to differentiate my computer which is not a webserver with a computer that is a webserver on my router.

Just forward the port. Say a client machine requests port 80 on your IP:

client --> [SOME INTERNET COMPUTERS] --> your router (this is your IP) --> your server (forwarded)

Got it?
 
Back
Top