D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: trold1964 on February 12, 2010, 06:37:27 AM

Title: Network Folder DMZ DFL210
Post by: trold1964 on February 12, 2010, 06:37:27 AM

Hi

How do I create a network folder on my computer when the server is on DMZ interface?

If my server is on LAN interface I can create network folder on my computer to the server.

I hope there are setup on my DFL-210

lan_ip = 192.168.1.1
lannet = 192.168.1.0/24

dmz_ip = 172.17.100.254
dmznet = 172.17.100.0/24

server = 172.17.100.1

someone who can help me?

Thanks

Jan

Title: Re: Network Folder DMZ DFL210
Post by: Fatman on February 12, 2010, 04:24:30 PM

Assuming that all relevant services are allowed between the 2 interfaces then just the same as you would any other network map.

Title: Re: Network Folder DMZ DFL210
Post by: trold1964 on February 12, 2010, 05:24:41 PM

What I meant was. My server also act as a file server so I can save files in a certain space on the server on my local network
Preview

I have 3 computer all must have a local drive on the server that they can share.

My server running server-only mode

Title: Re: Network Folder DMZ DFL210
Post by: Fatman on February 16, 2010, 12:54:12 PM

I hate to say it but I think we may have a language barrier as our primary problem here.

Assuming that you have IP Rules which allow SMB to pass between the two interfaces it should be no different than mapping a network drive (by IP) that is on the same network.

Can you be more specific on what exactly is going wrong, be as verbose as possible.

Title: Re: Network Folder DMZ DFL210
Post by: danilovav on February 16, 2010, 07:09:05 PM

If you use server just for local network, faster will be keep it on LAN.
But if you want to use DMZ, make allow LAN->DMZ rule and connect to server by IP address (Fatman is right), because multicast (NBT/SMB names) cannot be passed between intrefaces.

Title: Re: Network Folder DMZ DFL210
Post by: trold1964 on February 17, 2010, 03:34:50 AM

Thanks for the reply.

It will say that my entire network must be either on the DMZ interface or LAN interface.

If the server should only be ftp, web and mail server may well be on the DMZ interface.

Title: Re: Network Folder DMZ DFL210
Post by: rod.fuller on February 17, 2010, 08:00:36 AM

Do you have two network cards in the server? That would allow you to have the server on both the LAN and DMZ. What are you trying to accomplish? Because if you think you are protecting your server by putting it in the DMZ and opening up SMB services, you are kidding yourself. Once you open the SMB services the server is exposed whether it's on the LAN or DMZ.

Title: Re: Network Folder DMZ DFL210
Post by: trold1964 on February 17, 2010, 01:09:00 PM

Thanks for the reply.

I have two network cards on my server but has severed one.

I did not know that if you open port for its lannet then port is also open to wannet.

But I can access the server via sftp over ssh

I want to create user on my server that I must log on via my computer.