Post #3395945
2026-06-11 09:36 UTC
Should probably note that "DMZ" in this context means a separate VLAN. Because the term is also commonly used to mean "DMZ host" where a router exposes a machine directly to the Internet. You want the former, not the latter.
But, more to the point, a beginner really shouldn't be exposing anything to the Internet. 🙂 Running a public service as a person who doesn't know how domains work will not end well.
Replies (1)
-
@Cyber@feddit.uk 2026-06-11 20:15
No, I was referring to a separate DMZ host... Physically separate firewall connection, with different firewall policies between internet DMZ than DMZ internal network. Not a VLAN. VLAN Hopping makes it possible to jump between VLANs, so they should only be consided as an administration tool, not a security mechanism. But, I agree with you, putting a device on the internet isn't something that anyone should do without understanding the technical issues.