Probe: Any benefits to set in DMZ?
Hi! Is there any benefit to put the Probe in a home router "DMZ"? I could not find the answer in the FAQ. My setup is: 1- The Probe is directly connected to the ISP all-in-one router in it's DMZ (Bell Home Hub 3000, FTTH). 2- My personal router is directly connected to the ISP router, but connecting through PPPoE passthrough. Both routers have different ISP IPs. The ISP router is used for the Fiber SFP module, TV and phone. The Probe takes internet from the ISP router, but nothing else. Thanks, Martin Boissonneault Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum
Hi! Is there any benefit to put the Probe in a home router "DMZ"? I could not find the answer in the FAQ.
My setup is: 1- The Probe is directly connected to the ISP all-in-one router in it's DMZ (Bell Home Hub 3000, FTTH). 2- My personal router is directly connected to the ISP router, but connecting through PPPoE passthrough.
Both routers have different ISP IPs. The ISP router is used for the Fiber SFP module, TV and phone. The Probe takes internet from the ISP router, but nothing else.
Thanks, Martin Boissonneault
Based on this part of the FAQ, I don't personally see the point in going to such extremes, unless for some reason you really need to hide your own IP (though your ISP has probably given you a subnet, so not difficult to work out the other IPs in that subnet) https://atlas.ripe.net/about/faq/#security-and-privacy
On 2017-03-12 12:05:42 CET, Danny Horne wrote:
Based on this part of the FAQ, I don't personally see the point in going to such extremes, unless for some reason you really need to hide your own IP (though your ISP has probably given you a subnet, so not difficult to work out the other IPs in that subnet)
Actually, my ISP does give single a single IP per PPPoE connection. One for their multifunction Home Hub (Phone, TV, Internet/WiFi) and one for my personal router passing through their modem. Both are in different subnets. Hacking the Probe or the ISP router will not give access to my home network. It's protected from another router's firewall, and on another IP. And since my router has it's own PPPoE connection (and IP), no double-NAT. My original question was meant from a measurement point of view. Is there a benefit FOR THE PROBE to be _in a HOME router_ "DMZ-kinda-thing"? Home routers don't have true DMZs, the DMZ is not completely on the WAN side of the router usually. It's confirmed by my probe's local IP being on the LAN side even while being in the pseudo-"DMZ". If it was a true DMZ, it would be the WAN IP. Martin Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum
ATLAS network will get hacked one day, and by running probe in a separate segment (DMZ, guest LAN or whatever) you'll deny bad guys access to devices in your main LAN. -- With Best Regards, Marat Khalili On March 12, 2017 4:16:33 AM GMT+03:00, Martin Boissonneault <ve2mrx@hotmail.com> wrote:
Hi! Is there any benefit to put the Probe in a home router "DMZ"? I could not find the answer in the FAQ.
My setup is: 1- The Probe is directly connected to the ISP all-in-one router in it's DMZ (Bell Home Hub 3000, FTTH). 2- My personal router is directly connected to the ISP router, but connecting through PPPoE passthrough.
Both routers have different ISP IPs. The ISP router is used for the Fiber SFP module, TV and phone. The Probe takes internet from the ISP router, but nothing else.
Thanks, Martin Boissonneault
Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum
On 2017-03-12 2:16, Martin Boissonneault wrote:
Hi! Is there any benefit to put the Probe in a home router "DMZ"? I could not find the answer in the FAQ.
My setup is: 1- The Probe is directly connected to the ISP all-in-one router in it's DMZ (Bell Home Hub 3000, FTTH). 2- My personal router is directly connected to the ISP router, but connecting through PPPoE passthrough.
Both routers have different ISP IPs. The ISP router is used for the Fiber SFP module, TV and phone. The Probe takes internet from the ISP router, but nothing else.
Thanks, Martin Boissonneault
Hi, The probe works fine in a DMZ, as long as outgoing connections are permitted. It is perfectly fine to put it there, if it's not a hassle to do so. Regards, Robert
participants (4)
-
Danny Horne -
Marat Khalili -
Martin Boissonneault -
Robert Kisteleki