Chapter 8 Dmz Setup; Introduction; Figure 8-1 Menu 5: Dmz Setup - ZyXEL Communications 10 User Manual

This chapter describes how to configure the ZyWALL 100's DMZ using Menu 5: DMZ Setup.
8.1

Introduction

The DeMilitarized Zone (DMZ) auto-negotiating 10/100 Mbps Ethernet port provides a way for public
servers (Web, e-mail, FTP, etc.) to be visible to the outside world (while still being protected from DoS
(Denial of Service) attacks such as SYN flooding and Ping of Death). These public servers can also still be
accessed from the secure LAN.
By default the firewall allows traffic between the WAN and the DMZ, traffic from the DMZ to the LAN is
denied, and traffic from the LAN to the DMZ is allowed. Internet users can have access to host servers on the
DMZ but no access to the LAN, unless special filter rules allowing access were configured by the
administrator or the user is an authorized remote user.
It is highly recommended that you connect all of your public servers to the DMZ port. If you have more than
one public server, connect a hub to the DMZ port.
It is also highly recommended that you keep all sensitive information off of the public servers connected to
the DMZ port. Store sensitive information on LAN computers.
From the main menu, enter 5 to open Menu 5 – DMZ Setup.
DMZ Setup
ZyWALL 10~100 Series Internet Security Gateway
Menu 5 - DMZ Setup
1. DMZ Port Filter Setup
2. TCP/IP Setup
Enter Menu Selection Number:

Figure 8-1 Menu 5: DMZ Setup

Chapter 8
DMZ Setup
8-1