nagios
+ Reply to Thread
Results 1 to 7 of 7

Thread: Dmz

  1. #1
    Join Date
    Mar 2006
    Posts
    122

    Dmz

    Anyone know about this? and getting around it?

    Need ideas.
    T

  2. #2
    Join Date
    Sep 2006
    Posts
    1,649
    It's pretty much a a middle-man between the 'internal network' (for instance, a compnay LAN) and an 'external network' (the Internet). It's kinda like a firewall. More information here.

    [url]http://en.wikipedia.org/wiki/Demilitarized_zone_%28computing%2*[/url]

    As for bypassing it, here is a pdf/powerpoint on the techniques used for this kind of thing.

    [url]http://www.terena.org/activities/tf-csirt/meeting*/gowdiak-bypassing-firewalls.pdf[/url]

  3. #3
    Join Date
    Mar 2006
    Posts
    122

    Not really what I'm going for....

    I know all about the structure of dmz's (so the first is out the door), and the second link was what I found, which isn't what I'm looking for. See, I port scanned the guy with nmap. Now, his dmz allows only * ports. So, basically, my question really entitled was whether or not I treat it like a firewall now. (I know after the dmz is the compy's firewall, so it would be like bypassing two.)
    Maybe I'm thinking to hard.

    But thanks for the shot.
    Anyone else?

    Toast

  4. #4
    Join Date
    Sep 2006
    Posts
    1,649
    Yeah, it's basically a second firewall.

  5. #5
    Join Date
    Sep 2005
    Posts
    2,050
    Quote Originally Posted by toast
    I know all about the structure of dmz's (so the first is out the door), and the second link was what I found, which isn't what I'm looking for. See, I port scanned the guy with nmap. Now, his dmz allows only * ports. So, basically, my question really entitled was whether or not I treat it like a firewall now. (I know after the dmz is the compy's firewall, so it would be like bypassing two.)
    Maybe I'm thinking to hard.

    But thanks for the shot.
    Anyone else?

    Toast
    If it's just "one guy", then he probably doesn't use a DMZ. They're mostly for large companies which need to provide services to the net (mail server, DNS, website hosting) but don't want their internal network users to be accessible to the internet. He probably is behind a router and only forwarded * ports to his machine for certain services, which explains what you're experiencing.

    Whether or not he has a DMZ, try entering his IP address into your browser to get into the router's web interface - some routers allow management from outside the LAN. If it doesn't work, try adding :8080 at the end, and if it comes up with a basic authentication password prompt, use [URL="http://www.phenoelit.de/dpl/dpl.html"]this list[/URL] to find the default password. Once you're in, you can forward all the ports you like.

  6. #6
    Join Date
    Jun 2006
    Posts
    459
    I didnt think you could access the router outside the network. Probably the old ones only.
    7h* L**7*57 c4n7 h4ck m*!
    Proud to have quit playing ®µÑȧ©ÅÞË

    If you write like a semi-literate boob you will very likely be ignored.
    Writing like a l**t script kiddie hax0r is the absolute l**t*st way to write!
    L0L

  7. #7
    Join Date
    Mar 2006
    Posts
    122
    Well, see, the guy Im doing all this to, is someone I know. And I was having the worst time just getting his compy to reply. So I asked him, and he gave me the clue that he has a dmz and all other interactions are forwarded to his lappy.
    Thanks-

    Toast

    Edit: Nope the browser thing doesn't work....
    Last edited by toast; 01-01-2007 at 01:06 PM.

+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts