LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 01-01-2006, 04:00 PM   #1
Razr
LQ Newbie
 
Registered: Jul 2005
Posts: 2

Rep: Reputation: 0
DMZ and designed network segment


Hello, Happy New 2006 Year!

First, what exactly means DMZ? I already know, it's demilitarized zone, but may anyone tell me, when we use that? What exactly is it's task? What does it do?

What should I understand under "designed network segment"? I have done some google searches, but haven't found anything concrete.

thanks in advance.
 
Old 01-01-2006, 04:57 PM   #2
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,539

Rep: Reputation: 149Reputation: 149
http://en.wikipedia.org/wiki/Demilit...28computing%29
http://wiki.linuxquestions.org/wiki/DMZ

Together they should give the picture. In short, you use DMZ if you want to separate your servers from your internal network.

'Designed network segment'... What's the context? Without it, I'd think it's just about a network segment that had a project of some kind.
 
Old 01-01-2006, 05:10 PM   #3
Brian1
Guru
 
Registered: Jan 2003
Location: Seymour, Indiana
Distribution: Distribution: RHEL 5 with Pieces of this and that. Kernel 2.6.23.1, KDE 3.5.8 and KDE 4.0 beta, Plu
Posts: 5,700

Rep: Reputation: 61
Here is a very broad explantion. The normally is to have a router with 3 nics in it. First nic connects to the internet. second can connacet to internal lan machines and the third will be machine on the dmz circuit. Normally these are server machines that will be seen from the outside internet as machines on the first nic. The dmz is less secure because you allow open ports from the internet to it. On the lan side you very seldom have any open ports (normally never open any ports) to make information as secure as possible on this side.

designed network segments if I understand is usually used in large businesses. They create subnets of class A,B,or C address and divide them into smaller subnets. Look up subnetting for more info. So in a class C address of 192.168.1.0 and using the subnet 255.255.255.0 to define it as a class C you have use of 255 IP from 192.168.1.1 to 192.168.1.255.

Now if divide a class C into smaller segemnts we use 192.168.1.0 with a subnet 255.255.255.224 or same as 192.168.1.0/27. You will have total of 30 ip's to work with from 192.168.1.1 to 192.168.1.30 and use of 192.168.1.31 as broadcast. For the next segment you would use 192.168.1.32/27 which gets you 192.168.1.33 to 192.168.1.63 with 192.168.1.64 as broadcast. Even though both may be on the same network it requires a routing table to allow packets to and from each segment. One seldom divides a class C unless segmenting users from seeing each other.

Items to help in search. iptables, subnetting, firewall, routing, gateway.

Code:
    wan
  router
lan    dmz

Hope this helps out.
Brian
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
2 subnets on the same network segment robadawb Linux - Networking 5 11-16-2005 04:42 PM
Changing network segment of a Windows network eantoranz Linux - Networking 3 10-18-2005 10:58 AM
Network DMZ question svinka Suse/Novell 0 08-25-2005 05:50 PM
Can't access other network segment extremebfn Linux - Networking 2 09-03-2004 03:04 AM
Network with firewall and DMZ justwantin Linux - Networking 11 05-06-2004 05:07 AM


All times are GMT -5. The time now is 12:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration