Changing network ports from closed to stealthed

Then you are fortunate. I can show you my logs, or my long-term fail2ban jail. Oh, on one machine I just looked at, I have 205 unique IP address in the 1 year ban jail. That's 21 fails of the 3 fail short term ban, or 63 failures in a relatively short term.

Additionally, I have manually blocked several /24 net blocks in parts of Africa and China. In fact, you can see when the Chinese hackers show up to work, because all of a sudden a quiet ban day gets busy.

Now a days, I see ssh failures from remote hosts of 1 or 2 each, but many many many different IP addresses. If they get my ire up, I'll just toast some more /24 netblocks.

Never seen that meaning of DMZ before. The NAT routers I've used have called that Port Forwarding and none have provided the option of mass forwarding ALL the ports to an internal IP.

Then you have not seen many routers!

You need to see more home routers then as it's been standard on every D-Link, Netgear, TP-Link & Linksys home router I've ever seen.

DMZ is the extreme case of port forwarding. The difference being that whilst the item in the DMZ is on the LAN side, it is isolated from all the other LAN traffic.

Understood Thks for the explanation.

On Sun, 2 Aug 2015 18:42:49 +0000 (UTC), Martin Gregorie declaimed the following:

Whereas all the routers I've owned (Linksys) have ALL had DMZ mode

""" Applications and Gaming ? DMZ

The DMZ feature allows one network device to be exposed to the Internet for use of a special-purpose service, such as online gaming. The Router forwards all the ports at the same time to the DMZ device.

Note: After you have made your changes, click Save Settings to apply your changes.

DMZ

Enabled/Disabled

To expose one computer as the DMZ device, select Enabled. """

Whereas selective port forwarding only showed up on the newer routers.

""" Applications and Gaming - Single Port Forwarding

Single Port Forwarding allows you to customize port services for various applications. When users send these types of requests to your network via the Internet, the Router will forward those requests to the appropriate computers (also called servers).

Note: After you have made your changes, click Save Settings to apply your changes.

Single Port Forwarding

Application Name

Select the preset application, or enter the name of the custom application. External Port

For a custom application, enter the external port number that accepts incoming traffic.

Internal Port

For a custom application, enter the internal port number that accepts traffic forwarded by the Router.

Protocol

For a custom application, select the protocol(s) used. """

yes. the theory being if it gets hacked it doesn't expose the rest of the LAN.