This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Preventing DMZ machines initiating connections to Internet

Is there a way to create a rule that allows servers in the DMZ to receive external traffic, but not initiate traffic? The rule would be to prevent launching attacks by someone who has hacked into a DMZ server.

This thread was automatically locked due to age.

Parents

0 jabberwocky over 23 years ago

This should be there by default since I believe everything is already blocked. If you don't add a rule letting them start connections then they shouldn't be able to start connections.
Cancel
Vote Up 0 Vote Down

Cancel
0 t_enriquez over 23 years ago in reply to jabberwocky

Thanks,

That makes sense. However, if I create a rule that drops & logs outbound DMZ traffic (initiated from the DMZ), will it block established traffic originating from the internet?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 t_enriquez over 23 years ago in reply to jabberwocky

Thanks,

That makes sense. However, if I create a rule that drops & logs outbound DMZ traffic (initiated from the DMZ), will it block established traffic originating from the internet?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data