digg

Facebook Connect Join Digg About

What is a DMZ?

computernetworkinghelp.com — Explaination of what a DMZ is and the purpose for them as well as information on different types of DMZ designs for beginner to intermediate security professionals or just people interested in learning more about network security.

Who dugg this? Made popular May 24, 2006

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

47 Comments

show profanity settings
expand all
  • inactive, on 10/12/2007, -4/+33err I always thought it was the De Militarized Zone in Korea? Oh well...
  • swanny89, on 10/12/2007, -3/+18no, you're thinking of hell...
  • threepio, on 10/12/2007, -7/+16In the beginning there were Cardassians and Bajorans...
  • ismoke, on 10/12/2007, -0/+7Did you guys even RTFA? The analogy is right there in the first paragraph.
  • Kendal, on 10/12/2007, -0/+6The article doen't overtly state the fact that anything in the DMZ (including puppies) will get 'smacked' a.k.a, pinged, scanned, poked, prodded, possibly flooded, and generally be treated as a target.
  • ShatterWulf, on 10/12/2007, -3/+8Isnt that where you go to get your driver's license renewed?
  • Nitro2985, on 10/12/2007, -0/+4I'd find why the Internet is always represented as a cloud more interesting.
  • micro506, on 10/12/2007, -0/+3Yes, apparently "their is" people who find this interesting.
  • Terc, on 10/12/2007, -0/+3now teach the masses about honeynets!
    http://www.honeynet.org/misc/project.html
  • inactive, on 10/12/2007, -3/+6Yeah, DMZ is De Militarized Zone. But let's not hurt the article because of a bad title.
  • selkie, on 10/12/2007, -0/+2http://www.firewall.cx

    'Nuff said...
  • GliTCH82, on 10/12/2007, -0/+2What you just described is exactly what is stated in this article.
  • AJRiddle, on 10/12/2007, -2/+4First thing I thought of were all the demilitarized zones in the world (which is ironic because there is military there)...
  • otaking, on 10/12/2007, -1/+3lol the DMZ on my router doesn't seem to work...not like I'd want to expose myself anyway :D
  • synae, on 10/12/2007, -0/+2A DMZ is often a seperate computer or area of a network, where the connection to the rest of the network is highly restricted or impossible. Nothing of any importance or sensitivity should happen in the DMZ. So if you think of your network as "yourself" then yes, you expose "yourself" to attackers or whatever. But if you think of "yourself" as all of your sensitive/important/secure data or computers, then "you" are not exposed by creating a demilitarized zone.
  • iWorks, on 10/12/2007, -0/+2heh, close...
  • synae, on 10/12/2007, -1/+2I guess you didn't read the article.
  • ExplosiveNixon, on 10/12/2007, -2/+3Why is an article about a rapper on the front page?
  • VanillaBaron, on 10/12/2007, -0/+1From the article: "and hosts on the DMZ network cannot initiate communications with hosts on the internal network."

    I pointed out that hosts on our DMZ *can* initiate communication with LAN hosts.

    So no, what I described is not exactly what is stated in the article.
  • GliTCH82, on 10/12/2007, -0/+1I'm going to have to disagree with you here and say that my LAN is pretty small and I trust it fully. Any WiFi device on my network is getting routed to the internet via NAT, and since I have no machines on the DMZ area I am guaranteed safety from attacks on trojan ports and other software that listens for incoming connections from the internet.

    The ONLY thing I have to worry about is software that attempts to connect to the outside from the inside, and a good anti-virus/anti-spyware solution helps in that regard.
  • gmlk, on 10/12/2007, -1/+2With all the viruses, spyware, etc maybe we should give up on the idea of "trusted" network. So assume that the level of malware is lower with-in the local network, but never zero, so every node needs to protect it's own. Especially with wifi networks and notebooks one can never be sure.
  • modifiedbears, on 10/12/2007, -0/+1I use it for online gaming with my consoles.
  • purpleslog, on 10/12/2007, -1/+2It is time to be thinking about multiple security zones, not just DMZ and internal.
  • stoops, on 10/12/2007, -2/+2You and me both bro... wait, what?
  • stoops, on 10/12/2007, -3/+3Damn Dead Man's Zone! Stay away kids, it's dangerous.
  • r3al1tych3ck, on 10/12/2007, -1/+1You're right. A firewall at inside and outside of the DMZ would be a really good idea.
  • dsb1, on 10/12/2007, -1/+1CCIE 9277

    ?

  • GliTCH82, on 10/12/2007, -1/+1***** DMZ, just open up ports to whatever you need. What's the point of a firewall if you don't use it?
  • bsoric, on 10/12/2007, -2/+2DMZ- Where I put my computer when my POS Belkin Router stops forwarding ports...
    Also when I'm testing out network software.
  • GliTCH82, on 10/12/2007, -1/+1How is what he said wrong? Utilizing a DMZ is a much higher security risk than opening up some ports, because you're shifting your focus on security from a hardware firewall to a server/computer's operating system, where you are at the mercy of security patches and 6 million lines of possibly buggy code.
  • synae, on 10/12/2007, -2/+2There's nothing wrong with the title...what are you all going on about?

    A DMZ is a demilitarized zone, and asking "What is DMZ?" makes as much sense as asking "What is zone?". Sure, it makes sense as a definition of the word zone but if you want to understand the concept you should be asking "What is a zone?". After the answer you should have an understanding of what is necessary and sufficient for something to be considered a zone. Likewise for a DMZ.

    The grammatical structure is more or less the difference between asking for the dictionary definition and asking for the encyclopedia (wikipedia) article.
  • cohortq, on 10/12/2007, -3/+2and the Cardassians were an agressive race, that sought to expand their empire...
  • sHARD>>, on 10/12/2007, -5/+4I believe the title should be "What is DMZ?"; 'a DMZ' is a place, whereas 'DMZ' is a concept. Though that could be argued, as De-Militarized Zones exist or have existed at various points in the world. So it's sort of conceptual. Fine, I give up, the title is unfixable! :P
  • GliTCH82, on 10/12/2007, -2/+1Now that is just stupid. Why utilize a DMZ on your network in the first place if you're just gonna use another firewall right there where the device is? You're gonna have to open up ports on THAT in order to run any daemon services so you might as well do it at the point at which your internet is routed to your LAN and not use a DMZ at all.
  • r3al1tych3ck, on 10/12/2007, -1/+0The diagram shows a very serious problem. So, you set up your DMZ, you set up your firewall, AND you just allow your internal network free access to both? Oops. I don't think that was intended based upon the text. However, this article goes deep enough to be of little to no use.
  • JimXugle, on 10/12/2007, -2/+1Durrr... It's there to separate the two koreas

    :-P

    ... even though NK = /dev/null atm according to me.
  • rolypolyman, on 10/12/2007, -2/+1Awesome... DMZ on the front page of Digg along with DDR.... Berlin Wall y'all!
  • hanekida, on 10/12/2007, -2/+0I hope so, that's rhythmically
  • VanillaBaron, on 10/12/2007, -2/+0There are several routers that do not use the term "DMZ" to mean anything like what the article implies. I have no idea which one is the more common, but my router uses that term to mean "Default Machine Zone", and the only thing that happens to a machine when placed in there is that it receives all data on all incoming ports, irrespective of the NAT port forwarding rules. It is definitely *not* prevented from accessing the LAN in any way. You might want to check which kind of DMZ your router has.
  • Leonaken, on 10/12/2007, -4/+2It's Dragon Mall Z, the proof is in my head. The proof does not lie.
  • Jammerdelray, on 10/12/2007, -3/+0DMZ in military terms is a landing zone rofl
  • nesquik, on 10/12/2007, -5/+1Thank goodness I'm not the only one! Oh wait...
  • Itaintrite, on 10/12/2007, -5/+1Yeah! Let me find the hundred links of C++ tutorials and post them here. Maybe they'll all get digged.
  • nicklinus, on 10/12/2007, -5/+1how does this stuff make it to the front page. I guess their is alot of new computer people.
  • inactive, on 10/12/2007, -5/+0DMZ is Do Me Zone. It's were all people get laid. F'n idiots. Hey digg, do me a favor and kill yourself. =) . oh wait these rediculous posts already are doing it.
  • Rhaegal, on 10/12/2007, -8/+3Haha firewall.....cute
  • Sammy20, on 10/12/2007, -16/+4I prefer DBZ.

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.