DMZ on the SRX5308

[Ikkyu]

Hello,

I've been searching around the forum, but haven't found an answer yet, so hopefully someone can help me.

I have a block of ip addresses from my provider. I assigned one of these to the wan connection so that my lan can have internet access. I want to put two of the others in the DMZ as they are public ips for a mail server. I've looked at the WAN/DMZ rules and can't exactly figure it out.

I'm kind of new to all of this, so any help will be greatly appreciated.

Thanks.

[jmizoguchi]

http://interface.netgear-forum.com/F...nbound_dmz.htm

WAN Users: Specifies whether one or more IP addresses on the WAN will be affected by the rule. This rule will affect packets that are transferred for the selected service to the IP address or range of IP addresses on the WAN side.
v Any: All IP addresses on the WAN will be affected by the rule.
v Single Address: A single WAN IP address will be affected by the rule.
v Address Range: A range of WAN IP addresses will be affected by the rule.

[adit]

You don't need to put them in the DMZ. Just forward the ports and assign the IP's.

[Ikkyu]

Thanks for the quick responses guys!

I think I must be dense because I'm still having a problem figuring out how this works.

Each of the servers I want in the DMZ has a WAN IP from the block assigned by my ISP, so let's say that block is 65.104.98.1 to 65.104.98.24 (Just examples, not my real ips) I set the WAN 1 on the SRX5308 to use 65.104.98.20 as the ip address.

I configured the 4th lan for the DMZ and give it the lan address of 192.168.100.1.

I want to stick a server in the DMZ section with a WAN ip of 65.104.98.2, and another with a WAN ip of 65.104.98.3 so that the internet can see them.

If I put a machine in the DMZ with an ip of 192.168.100.2 and have the WAN/DMZ rule set to allow all for http, I get internet on that machine, and that makes sense to me. How do I configure it to allow these fixed WAN ips for machines in the DMZ? The SRX5308 doesn't seem to support this.

Thanks for any help you can give me.