Issues with your account? Bug us in the Discord!

Router Questions...

SanfamSanfam I like clocks.
So, as I am now researching how to best implement an apartment-wide internet connection, I have come to this:

I need a router. But that's not just it. I need a router/NAT Device that can do *multiple* DMZs (DeMilitarized Zones). Now, I remember seeing something about getting some linux router software working to do just that, but I have a problem: I do not remember which one it was, or how to go about doing it.

Some may ask, why do I need multiple DMZs? Well, easy: My roomate and I are both avid internet users/internet game players. Being as such, we need to have all ports open to at least two systems, perhaps more. While two internet connections would seem to be the best idea, that will quickly move beyond the realm of practicality, and also makes having a unified network unfeasable.

Comments

  • BekennBekenn Sinclair's Duck
    Can't happen. The router only has one IP address. When you set up one of your machines as a DMZ, the router simply forwards all incoming communications to that computer. It can't differentiate between communications intended for your machine and communications intended for your roommate, because the sender can only see the IP address for your router.

    You can set it up so that each machine can be DMZ at different times, but not simultaneously.
  • BigglesBiggles <font color=#AAFFAA>The Man Without a Face</font>
    Your best bet is a linux box. Linux can do what you want by default (apart from the duplicating ports thing... that isn't really possible), and is infinitely more configurable than all the consumer level hardware routers I've seen.

    My personal recommendation would be to get an old pentium (I use a p233mmx), install the gentoo base system from the stage 2 install, then install shorewall.
  • BigglesBiggles <font color=#AAFFAA>The Man Without a Face</font>
    [QUOTE][i]Originally posted by Bekenn [/i]
    [B]Can't happen. The router only has one IP address. When you set up one of your machines as a DMZ, the router simply forwards all incoming communications to that computer. It can't differentiate between communications intended for your machine and communications intended for your roommate, because the sender can only see the IP address for your router.

    You can set it up so that each machine can be DMZ at different times, but not simultaneously. [/B][/QUOTE]

    Well, you can have to DMZs, but they each have to have separate port ranges, thus limiting their usefulness and not really making them proper DMZs anymore.
  • Entil'ZhaEntil'Zha I see famous people
    [QUOTE][i]Originally posted by Biggles [/i]
    [B]Well, you can have to DMZs, but they each have to have separate port ranges, thus limiting their usefulness and not really making them proper DMZs anymore. [/B][/QUOTE]

    Our router at work does multi DMZ's, of course its also a Dual wan router, but but but, :)
  • E.TE.T Quote-o-matic
    At least SMC2804WBR has ability for "multiple" NAT so that it can hide different LAN address ranges behind different WAN IPs. (for example 192.168.2.2-100 behind first WAN IP and 192.168.2.100-200 behind another one)
    [quote]Address Mapping
    Network Address Translation (NAT) allows IP addresses used in a private local network to be mapped to one or more addresses used in the public, global Internet.[/quote]
    But I'm not sure is it capable of taking multiple WAN IPs from ISP's DHCP (no problems If your ISP don't use dynamic IPs) and is it then capable making multiple DMZs... or forwarding same ports from multiple WAN IPs to corresponding LAN IPs behind them.


    Actually I think that DMZ might not be necessary for playing multiplayer games in net from behind router.
    [quote]Firewalls and routers that support UPnP with Gateway Extensions can allow multiple computers to host and join games by connecting through the device to Impossible Creatures online. Firewalls and routers that do not support UPnP with Gateway Extensions can only allow a single computer to connect, through the device,[/quote][url]http://support.microsoft.com/default.aspx?scid=kb;en-us;812330[/url]
    I think that same might apply to any game using DirectPlay.
  • SpiritOneSpiritOne Magneto ABQ NM
    you dont have to have all of your ports open to play games. you just have to have a smart enough firewall that lest you do what you want. I run two firewalls, the hardware one built into my router and the software one built Norton Internet security (which thanks to recent patches to both, sp2 now sees as a proper firewall). You usually have to "Train" a firewall to know what to allow and what not to allow but after that, you shouldnt have any problems.
Sign In or Register to comment.