In your opinion is more safe to put amule in a dmz (with access to outside but not to my lan) or in a separate network?
Please post output of
ubus call system board
from your OpenWrt router.
It is up to you to segment your network or not.
1 Like
Here is the output
{
"kernel": "6.6.70",
"hostname": "OpenWrt",
"system": "xRX200 rev 1.2",
"model": "AVM FRITZ!Box 7490 (Micron NAND)",
"board_name": "avm,fritz7490-micron",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"revision": "r28556-277642c035",
"target": "lantiq/xrx200",
"description": "OpenWrt SNAPSHOT r28556-277642c035",
"builddate": "1736633575"
}
}
You dont run bleeding edge software for security.
1 Like
You can do micro-segmentation like one machine per /30 , it is a lot of hassle, but you be totally safe from fridge haking teapot and vice versa.
1 Like
A DMZ network is just a separate network
Assuming you mean the P2P file sharing software, then it depends entirely on your risk profile. If it's likely to get compromised, then yes I'd put it into a network that can only reach the internet but can be reached from your "internal" network.
If it's likely to end up with malicious content on it from external users, then how you limit your client access to that stuff is for you to decide.
1 Like