Clarification on DMZ/Port Forwarding

Routers
1

Hello!

I’m looking to understand the settings under Network > Port Forwarding. Specifically when setting up DMZ and individual port forwarding port.

The documentation states that “If the priority of the DMZ is higher than the port forwarding rules, all the port forwarding rules will be invalidated.”

Does that mean if I set the DMZ IP for a device, then set priority to “lowest” it will use the Port Forwarded ports first before going to the DMZ?

Should I even use the DMZ for my main server or just make sure all ports needed are added?

2

That’s a little confusing to me, too.

DMZ exposes all ports (65535) for that IP to the internet, effectively disabling the firewall rules for that host. Not a good idea.

3

Well as I was waiting on my post to be approved, I first set DMZ to lowest and I was able to SSH into my second server finally. I then disabled the DMZ entirely, rebooted the router and I was able to SSH into both of my servers without an issue and everything is able to communicate as needed.

So yes if you have multiple devices that are you are needing to be able to access outside your network, just setup needed ports to be forwarded (as long as your not behind CG-NAT) and it should work.

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.