I am looking at trying to set up a DMZ but can't figure out how to do it.
I have only one public IP address to work with and the LAN interface is setup and working perfectly with port forwarding rules.
I want to add a second interface for a DMZ that has complete unrestricted internet access (exactly like as if the computer connected to it has a public IP address).
I then want the LAN to have access to the DMZ but the DMZ can't access the LAN. I also want the LAN to have the usual filter and restrictions and the DMZ is un restricted.
How would I program the the rules to do that?
|