I recently installed Untangle and was attempting to setup a DMZ. It didn't seem as straight forward as I thought to separate my internal network from the dmz. I only have a web server that I allow the internet to access occasionally, so I thought I would just use port forwarding. That works correctly, but I also don't want that machine at 192.168.1.107 to be able to talk to any of my internal machines on the .1 network. Untangle is at 192.168.1.1. I tried using firewall rules like source interface = internal and dest address is 192.168.1.107, but i could still access the web server from internal. any thoughts on how to easily setup a dmz network with a different address pool or just how to isolate one machine internally talking to the others? Thanks,
↧