[atlas] Probe: Any benefits to set in DMZ?

On 2017-03-12 12:05:42 CET, Danny Horne wrote:
> Based on this part of the FAQ, I don't personally see the point in going to such extremes, unless for some reason you really need to hide your own IP (though your ISP has probably given you a subnet, so not difficult to work out the other IPs in that subnet)
> 
> https://atlas.ripe.net/about/faq/#security-and-privacy

  Actually, my ISP does give single a single IP per PPPoE connection. One for their multifunction Home Hub (Phone, TV, Internet/WiFi) and one for my personal router passing through their modem. Both are in different subnets. Hacking the Probe or the ISP router will not give access to my home network. It's protected from another router's firewall, and on another IP. And since my router has it's own PPPoE connection (and IP), no double-NAT. 

  My original question was meant from a measurement point of view. Is there a benefit FOR THE PROBE to be _in a HOME router_ "DMZ-kinda-thing"? 

  Home routers don't have true DMZs, the DMZ is not completely on the WAN side of the router usually. It's confirmed by my probe's local IP being on the LAN side even while being in the pseudo-"DMZ". If it was a true DMZ, it would be the WAN IP.

Martin


Sent via RIPE Forum -- https://www.ripe.net/participate/mail/forum