Advanced; Dmz - TRENDnet TEW-692GR User Manual

Advanced

DMZ

DMZ Setting
DMZ means "Demilitarized Zone." If an application has trouble working from behind the router, you can
expose one computer to the Internet and run the application on that computer.
When a LAN host is configured as a DMZ host, it becomes the destination for all incoming packets that
do not match some other incoming session or rule. If any other ingress rule is in place, that will be used
instead of sending packets to the DMZ host; so, an active session, virtual server, active port trigger, or
port forwarding rule will take priority over sending a packet to the DMZ host. (The DMZ policy resembles
a default port forwarding rule that forwards every port that is not specifically sent anywhere else.)
The router provides only limited firewall protection for the DMZ host. The router does not forward a TCP
packet that does not match an active DMZ session, unless it is a connection establishment packet (SYN).
Except for this limited protection, the DMZ host is effectively "outside the firewall". Anyone considering
using a DMZ host should also consider running a firewall on that DMZ host system to provide additional
protection.
37