Putting a machine in DMZ mode?

**Magnum50** · 07-12-2007, 01:15 PM

Excuse my ignorance... but one major PC thing I have never understood id ports and firewalls... most of my games allow me too host via internet, but a few don't...

I know how to disable the firewall within my protection package, but still can't host some games... I know that if I put my PC in to a DMZ mode during hosting that opens up all the ports...dangerous, but needed...

but everytime I try to put it in DMZ mode it don't work or save the settings... might be putting in the wrong info, like whether the internal or external IP to my PC goes in the IP... ie heres a screen I get to put it in DMZ mode:

What goes into the 2 Fields?

also...

Is this the way you open ports for specific games? What goes into those fields:

Thanks for any info or enlightenment.

icky · 07-12-2007, 03:21 PM

First of all, don't use DMZ mode at all other than to test. If you are going to use it some of the time, you might as well run without firewall protection all of the time.

Quote:

Originally Posted by Magnum50

What goes into the 2 Fields?

Internal IP address of the machine being exposed, and it appears that there is a pulldown which will allow you to select a machine from a list (DHCP list?). The IP address alone should be fine there.

Quote:

Originally Posted by Magnum50

Is this the way you open ports for specific games? What goes into those fields:

Yes. A name of your choice for saving the setting, the Internal IP as above, and the TCP and UDP ports you need open to host the game.

**Magnum50** · 07-12-2007, 03:48 PM

OK.. there is a pull down, but the last 4 are NOT what the cmd command says my IP is... the pull down says it's 000, while cmd says 173... is this correct?

Thx

icky · 07-12-2007, 03:57 PM

Is your machine using DHCP to get its address, or is that .173 hardcoded?

It appears as if only one machine on your network has obtained an address with DHCP, and that is 192.168.0.100.

**Tempus** · 07-12-2007, 04:02 PM

If you have a software firewall, you can get away with a DMZ.

**deathknight** · 07-12-2007, 06:58 PM

To get your IP magnum, go to a command prompt and run ipconfig /all

If you are going to run your pc on the dmz you will want a static ip.

So make sure the IP is listed as static under the output.

If not you will have to go into the network settings for your card and set it manually.

If you need any help, look me up on aol or msn and I will see what I can do via chat so you can work and test it.

=Sarc= · 07-12-2007, 07:00 PM

I've used DMZ a lot on my machine. Although, I have to turn it off and use port forwarding whenever I use Steam (can't login with DMZ on).

It seems unlikely to get hacked. Who would hack some nobody's computer when there are plenty of servers out there that run 24/7 and have much better bandwidth to utilize for whatever hacking purposes?

If you're paranoid, turn it on when gaming and turn it off when you're done. After all, you'll be at the PC if anything suspicious happens.

**ednos** · 07-12-2007, 08:13 PM

Quote:

Originally Posted by =Sarc=

It seems unlikely to get hacked. Who would hack some nobody's computer when there are plenty of servers out there that run 24/7 and have much better bandwidth to utilize for whatever hacking purposes?

Security by obscurity IS NOT SECURITY.

=Sarc= · 07-12-2007, 08:32 PM

Quote:

Originally Posted by ednos

Security by obscurity IS NOT SECURITY.

It's not like I said leave it off all the time.

Although, I honestly think people are a bit too paranoid. They all think their computer is so special that it'll be hacked. Just stay away from the P2P programs, scan e-mail attachments, don't open suspicious e-mail and the chance for intrusions aren't going to be high. Hackers don't really care about joe smith's computer unless they have a personal vendetta.

**ednos** · 07-12-2007, 09:09 PM

No, you don't get it. Security by obscurity... IS NOT SECURITY. "No one would ever want to hack me!" is not at all a valid reason for leaving your computer open. Hackers don't sit down and think, "Which international multi-billion dollar franchise's network should I infiltrate today?" Hackers write scripts that patrol for unprotected computers to add to a farm of compromised machines they can use for whatever foul purpose they've dreamed up. It's not that anyone will be likely to attempt a direct personal attempt on your machine, except accidentally, but Windows has some conveniently easy exploits built in as features--convenient in that a script is all you need to utilize them.

=Sarc= · 07-12-2007, 09:19 PM

There still has to be a way to find your particular computer. I still think that the best way to do that is through automated social engineering. This means you'll probably get breached through e-mail.

How do you get infected through an e-mail? You open it. No firewall will stop that.

icky · 07-12-2007, 09:54 PM

Individuals don't have to target your system for you to have problems. Try connecting a fresh install of WinXP to the internet with no security updates. Leave it up for 24 hours and I can guarantee that you will have a remotely controlled zombie computer on your hands. I did something similar with my parent's computer once when they were on dial-up. I couldn't handle the wait to d/l security fixes, so I told them I would put them on a CD and come back in a few days. When I got back, the system had to be re-installed again. Try putting up a Linux server with SSH and the user/password combo of root/root and in 24 hours you will be all decked out with a rootkit of your own and kiddies using you to connect to IRC.

There are worms running rampant on the internet, running automated searches for known weaknesses and collecting victims. Anyone who has browsed through their security logs has seen this as clear as day. You don't notice because you probably keep your Windows fully updated with security patches, but it is very easy to inadvertently open a known hole.

I will admit that these days MOST computer problems I see come originally from email attachments, but that doesn't mean that there aren't millions of little bots out there looking for more systems to add to their team. It is true that they don't care about little old you, but they love using your system.

It isn't paranoia, it is reality.

**ednos** · 07-12-2007, 10:04 PM

Quote:

Originally Posted by =Sarc=

There still has to be a way to find your particular computer.

If you're connected to the internet, you have an IP address. Your IP address is one of roughly 4,211,603,969 possible public IP addresses. It doesn't take too long for a computer to count that high. It doesn't take long for a simple script to try its magic on every single one of those.

**DigitalAssassin** · 07-12-2007, 10:09 PM

Another thing to keep in mind is those same kiddies know what IP address pools are used by the major providers (TW, Comcast, etc.). Limit your scan to those IP pools knowing they will be one of the more likely pools to have unprotected machines since they are usually personal/home machines and the job just got a lot easier.

**Magnum50** · 07-12-2007, 11:00 PM

thx for the lessons... now can anyone help on the topic?

07-12-2007, 01:15 PM	#1 (permalink)
Magnum50 Join Date: Aug 2004 Location: Naples, Florida USA Age: 42 Posts: 4,047	Putting a machine in DMZ mode? Excuse my ignorance... but one major PC thing I have never understood id ports and firewalls... most of my games allow me too host via internet, but a few don't... I know how to disable the firewall within my protection package, but still can't host some games... I know that if I put my PC in to a DMZ mode during hosting that opens up all the ports...dangerous, but needed... but everytime I try to put it in DMZ mode it don't work or save the settings... might be putting in the wrong info, like whether the internal or external IP to my PC goes in the IP... ie heres a screen I get to put it in DMZ mode: What goes into the 2 Fields? also... Is this the way you open ports for specific games? What goes into those fields: Thanks for any info or enlightenment. __________________ Magnum Thanks for the games, thanks for the memories... See ya.

07-12-2007, 03:48 PM	#3 (permalink)
Magnum50 Join Date: Aug 2004 Location: Naples, Florida USA Age: 42 Posts: 4,047	Re: Putting a machine in DMZ mode? OK.. there is a pull down, but the last 4 are NOT what the cmd command says my IP is... the pull down says it's 000, while cmd says 173... is this correct? Thx __________________ Magnum Thanks for the games, thanks for the memories... See ya.

07-12-2007, 03:57 PM	#4 (permalink)
icky Join Date: Jul 2005 Location: Ottawa Valley Posts: 6,154	Re: Putting a machine in DMZ mode? Is your machine using DHCP to get its address, or is that .173 hardcoded? It appears as if only one machine on your network has obtained an address with DHCP, and that is 192.168.0.100. __________________ Peace through fear... since 1947!

07-12-2007, 04:02 PM	#5 (permalink)
Tempus Join Date: May 2003 Location: Miami, FL Age: 38 Posts: 8,272	Re: Putting a machine in DMZ mode? If you have a software firewall, you can get away with a DMZ. __________________ Battlefield 2/2142 Game Officer Contact me with server/player/admin issues. -- Suits are what you wear when doing things you shouldn’t want to do anyway. FROM THE TACTICAL GAMER PRIMER. 3) Support game play in a near-simulation environment. Where the focus of play would not be solely on doing what it takes to win, but doing so utilizing real-world combat strategy and tactics rather than leveraging exploits provided to players by the design of the game engine.

07-12-2007, 06:58 PM	#6 (permalink)
deathknight Join Date: Sep 2006 Location: Pittsburgh, Pa Age: 33 Posts: 354	Re: Putting a machine in DMZ mode? To get your IP magnum, go to a command prompt and run ipconfig /all If you are going to run your pc on the dmz you will want a static ip. So make sure the IP is listed as static under the output. If not you will have to go into the network settings for your card and set it manually. If you need any help, look me up on aol or msn and I will see what I can do via chat so you can work and test it.

07-12-2007, 07:00 PM	#7 (permalink)
=Sarc= Join Date: May 2003 Location: Ottawa, Canada Posts: 4,712	Re: Putting a machine in DMZ mode? I've used DMZ a lot on my machine. Although, I have to turn it off and use port forwarding whenever I use Steam (can't login with DMZ on). It seems unlikely to get hacked. Who would hack some nobody's computer when there are plenty of servers out there that run 24/7 and have much better bandwidth to utilize for whatever hacking purposes? If you're paranoid, turn it on when gaming and turn it off when you're done. After all, you'll be at the PC if anything suspicious happens. __________________ JO Guides & Tutorials Team Element - It's who you game with.

07-12-2007, 09:09 PM	#10 (permalink)
ednos Join Date: Dec 2006 Location: Massachusetts Posts: 3,939	Re: Putting a machine in DMZ mode? No, you don't get it. Security by obscurity... IS NOT SECURITY. "No one would ever want to hack me!" is not at all a valid reason for leaving your computer open. Hackers don't sit down and think, "Which international multi-billion dollar franchise's network should I infiltrate today?" Hackers write scripts that patrol for unprotected computers to add to a farm of compromised machines they can use for whatever foul purpose they've dreamed up. It's not that anyone will be likely to attempt a direct personal attempt on your machine, except accidentally, but Windows has some conveniently easy exploits built in as features--convenient in that a script is all you need to utilize them. __________________ The trouble with the world is that the stupid are cocksure and the intelligent are full of doubt. ~ Bertrand Russell I have a tendency to key out three or four things and then let them battle for supremacy while I key, so there's a lot of backspacing as potential statements are slaughtered and eaten by the victors. ~ Magna Centipede

07-12-2007, 09:19 PM	#11 (permalink)
=Sarc= Join Date: May 2003 Location: Ottawa, Canada Posts: 4,712	Re: Putting a machine in DMZ mode? There still has to be a way to find your particular computer. I still think that the best way to do that is through automated social engineering. This means you'll probably get breached through e-mail. How do you get infected through an e-mail? You open it. No firewall will stop that. __________________ JO Guides & Tutorials Team Element - It's who you game with.

07-12-2007, 09:54 PM	#12 (permalink)
icky Join Date: Jul 2005 Location: Ottawa Valley Posts: 6,154	Re: Putting a machine in DMZ mode? Individuals don't have to target your system for you to have problems. Try connecting a fresh install of WinXP to the internet with no security updates. Leave it up for 24 hours and I can guarantee that you will have a remotely controlled zombie computer on your hands. I did something similar with my parent's computer once when they were on dial-up. I couldn't handle the wait to d/l security fixes, so I told them I would put them on a CD and come back in a few days. When I got back, the system had to be re-installed again. Try putting up a Linux server with SSH and the user/password combo of root/root and in 24 hours you will be all decked out with a rootkit of your own and kiddies using you to connect to IRC. There are worms running rampant on the internet, running automated searches for known weaknesses and collecting victims. Anyone who has browsed through their security logs has seen this as clear as day. You don't notice because you probably keep your Windows fully updated with security patches, but it is very easy to inadvertently open a known hole. I will admit that these days MOST computer problems I see come originally from email attachments, but that doesn't mean that there aren't millions of little bots out there looking for more systems to add to their team. It is true that they don't care about little old you, but they love using your system. It isn't paranoia, it is reality. __________________ Peace through fear... since 1947!

07-12-2007, 10:09 PM	#14 (permalink)
DigitalAssassin Join Date: Jun 2005 Location: Kansas City Age: 35 Posts: 1,609	Re: Putting a machine in DMZ mode? Another thing to keep in mind is those same kiddies know what IP address pools are used by the major providers (TW, Comcast, etc.). Limit your scan to those IP pools knowing they will be one of the more likely pools to have unprotected machines since they are usually personal/home machines and the job just got a lot easier. __________________

07-12-2007, 11:00 PM	#15 (permalink)
Magnum50 Join Date: Aug 2004 Location: Naples, Florida USA Age: 42 Posts: 4,047	Re: Putting a machine in DMZ mode? thx for the lessons... now can anyone help on the topic? __________________ Magnum Thanks for the games, thanks for the memories... See ya.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Sponsored links

Sponsored links

Sponsored links

Sponsored links