Knowledge Base
AVM Content
- FRITZ!Box 7690
- FRITZ!Box 7590 AX
- FRITZ!Box 7590
- FRITZ!Box 7583 VDSL
- FRITZ!Box 7583
- FRITZ!Box 7582
- FRITZ!Box 7581
- FRITZ!Box 7560
- FRITZ!Box 7530 AX
- FRITZ!Box 7530
- FRITZ!Box 7520
- FRITZ!Box 7510
- FRITZ!Box 7490
- FRITZ!Box 7430
- FRITZ!Box 7390
- FRITZ!Box 7360
- FRITZ!Box 6890 LTE
- FRITZ!Box 6850 5G
- FRITZ!Box 6850 LTE
Setting up a DMZ with the FRITZ!Box
A DMZ (demilitarized zone) is a special network that can be accessed from the internet and the local network (LAN). A firewall completely blocks access from the DMZ to the LAN. This concept allows you to make server services (such as email servers) in the DMZ available for access from the internet and from the LAN, but does not make you vulnerable to attacks on the LAN from the internet.
Note:All instructions on configuration and settings given in this guide refer to the latest FRITZ!OS for the FRITZ!Box.
1 The FRITZ!Box does not support DMZ
FRITZ!Box does not support the implementation of a DMZ (demilitarized zone).
Workaround
The term "DMZ" is often incorrectly used for the "exposed host" function. If you use the "exposed host" function, all of the ports are opened for a device in the network.
The following step is only necessary if you want to set up an "exposed host" for a device in the FRITZ!Box home network instead of a "DMZ":
Important:Incoming connections to destination ports for which you configured separate port sharing rules are not forwarded to the "exposed host". Instead, they are forwarded to the device specified in the separate port sharing rule.
- Click "Internet" in the FRITZ!Box user interface.
- Click "Permit Access" in the "Internet" menu.
- Click on the "Port Sharing" tab.
- Click the (Edit) button for the (computer) name of the device that you want to set up an exposed host for. If you have not configured any sharings for the device yet:
- Click "Add Device for Sharing".
- Select the (computer) name of the device from the drop-down list "Device".
Note:If you cannot select the device, you can select "Enter the IP address manually" and enter the IP address. Only devices that automatically obtain their IP settings (DHCP) from the FRITZ!Box are listed in the drop-down list.
- Enable the option "Open this device completely for internet sharing via IPv4 (exposed host)".
- If the device supports the IPv6 protocol and you also want to set up the exposed host for IPv6 internet access, enable the option "Open this device completely for internet sharing via IPv6 (exposed host)".
Note:This option is only displayed if IPv6 support is enabled in the FRITZ!Box under "Internet > Account Information > IPv6".
- Click "Apply" to save the settings.