Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[JoeLansing]

I configured a guest zone, and don't have the check box clicked for Route Between Zones.  But I can still SSH, HTTP, and whatever between the zones. 

HW 1A
FW 1.13WW

I'm trying to put a honeypot on the guest zone, and in the DMZ for security fun, but I sure want it far away from my internal network.
Any ideas?

- Joe

[FurryNutz]

Link>Welcome!

• What region are you located?

Internet Service Provider and Modem Configurations

• What ISP Service do you have? Cable or DSL?
• What ISP Modem Mfr. and model # do you have?

How is the honeypot configured on the router? Using a reserved IP address with in the default DHCP IP address pool?
How are you determining the routes between zone? Please give details.
DMZ should be WAN side route only. 

[JoeLansing]

I'm using a Zoom modem from Walmart on Comcast.  But that shouldn't matter.  My Normal to Guest traffic should be all internal if it is all using non-routable 192.168.11.* type addresses.

I'm in Michigan USA if that is a Region?  Is like my WW firmware hmmm  World Wide or just wrong?   I've been doing computer networks for over 20 years.  I love D-Link, but this silly thing has me stumped.  I can I just add a firewall rule in the router to say 192.168.11.100 isn't allowed to talk to any other 192.168.*.* addresses?  Roll my own Guest zone?

I want to put this Guest/DMZ honeypot on the outside so I can only reach it by like using a phone hotspot.  Right now it acts like a normal non-guest system.

- Joe

[JoeLansing]

>>How is the honeypot configured on the router? Using a reserved IP address with in the default DHCP IP address pool?
Yes. 

>>How are you determining the routes between zone? Please give details.
I added it to the Guest zone.  I don't want any routing except to the outside for it.  This is my problem, it still routes to my internal in Guest Zone.

>>DMZ should be WAN side route only. 
That is my goal.  So I can only reach it with like a phone hotspot on a different carrier. 

[JoeLansing]

192.168.11.* is my wifi network
192.168.11.108 is placed into the DMZ.
192.168.11.108 connects to the Guest Zone SSID
192.168.11.108 can still talk to all my other 192.168.11.* internal home devices on another SSID.
This is a problem when 192.168.11.108 is running honeeepi on a Raspberry "

- Joe

[FurryNutz]

Any status on this?