Overview of setting up a DMZ

This is just a list of the steps needed to set up a DMZ on your network. It is NOT a tutorial on how to perform each task. For more information, please investigate other articles on www.beginnertechcorner.com For article requests, head over to the Forums.

 

  1. First, choose the server that you want to place in the DMZ. Most people choose a Linux server for this, but there are Windows servers as well.
  2. Place firewalls before and after the DMZ and configure them for the service you will be offering. For most smaller scale setups, this means putting a firewall on the server in the DMZ and the computers on the internal network as well. For larger setups, you may use more hardware for dedicated firewalls. (for a home or small office setup, a Raspberry Pi or similar can be a very low-cost alternative)
  3. Place the Server in the DMZ network and configure routing for both that network and the internal network. This is also a good time to harden the server you are using.
  4. Finally – update, update, update. It is very important that the server, as well as all the computers behind the server on the internal network, are kept up to date with all security patches. This cannot be overstated. In most cases you will be running firewalls on each computer in the internal network instead of a dedicated firewall on the inside of the DMZ. This is not ideal, if you are running a server, I strongly recommend that you purchase another firewall to go between it and the internal network.