Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
Psittac

Dynamic DNS Domain

Recommended Posts

Posted · Original PosterOP

So I recently set up a domain for an upcoming minecraft server but I've been a little worried about what this all means for my safety, it's basically the opposite of a vpn.  I don't have it updating my IP currently but will be.  I'm completely new to this world so sorry if I'm not asking the right questions or giving the right info.

Link to post
Share on other sites

Having a domain pointed to your ip address won't really do anything. Opening up your minecraft server can be a issue if there is a vulnerability in the server. So its best to put it on a dmz or limit the minecraft server from access the rest of your network.

 

The other threat is a ddos, but that dependson who you invite. Random people don't normally ddos you.

Link to post
Share on other sites
Posted · Original PosterOP
Just now, Electronics Wizardy said:

Having a domain pointed to your ip address won't really do anything. Opening up your minecraft server can be a issue if there is a vulnerability in the server. So its best to put it on a dmz or limit the minecraft server from access the rest of your network.

 

The other threat is a ddos, but that dependson who you invite. Random people don't normally ddos you.

ok thank you

Link to post
Share on other sites
Posted · Original PosterOP
3 minutes ago, Electronics Wizardy said:

Having a domain pointed to your ip address won't really do anything. Opening up your minecraft server can be a issue if there is a vulnerability in the server. So its best to put it on a dmz or limit the minecraft server from access the rest of your network.

 

The other threat is a ddos, but that dependson who you invite. Random people don't normally ddos you.

oh, I'm cutting down to one machine now, a DMZ requires a physical machine not a VM?

 

*edit: couldn't I do a VM and assign it's own IP and put that in a DMZ?

Link to post
Share on other sites
4 minutes ago, Psittac said:

oh, I'm cutting down to one machine now, a DMZ requires a physical machine not a VM?

 

*edit: couldn't I do a VM and assign it's own IP and put that in a DMZ?

You can do a dmz in a vm. Just setup  multiple virtual networks.

Link to post
Share on other sites
Posted · Original PosterOP
3 minutes ago, Electronics Wizardy said:

You can do a dmz in a vm. Just setup  multiple virtual networks.

ok thanks, I'll just have to learn more about networking.  I've got a layer something switch that can do all kinds of stuff but I'm not smart enough to do it, networking has a very steep learning curve

Link to post
Share on other sites

Wouldn't it be better to put that server behind the firewall and forward only the minimum number of ports required to it?  Putting the server in the DMZ doesn't make the other computers on the network safer, it just makes the server a more accessible target.  I believe to achieve isolation from the other computers on the network you would need to put the server on it's own subnet or VLAN.


PC: Ryzen 5-3600 / MSI MPG X570 Gaming Plus / 16GB (2x8GB) Corsair Vengeance LPX 3600 / MSI GTX 1070 TI Gaming / Phanteks P400S / LG 34" Ultrawide IPS

Laptop: Lenovo X230 / OS X 10.15 Hackintosh (OpenCore)

F@H ID: Paroxy777

Link to post
Share on other sites
47 minutes ago, Psittac said:

ok thanks, I'll just have to learn more about networking.  I've got a layer something switch that can do all kinds of stuff but I'm not smart enough to do it, networking has a very steep learning curve

Its probalby not really needed, but it would be best practice.

 

39 minutes ago, Paroxy said:

Wouldn't it be better to put that server behind the firewall and forward only the minimum number of ports required to it?  Putting the server in the DMZ doesn't make the other computers on the network safer, it just makes the server a more accessible target.  I believe to achieve isolation from the other computers on the network you would need to put the server on it's own subnet or VLAN.

Yea, you only port forward needed ports, but putting it in a dmz would make it so that if it did get comprismised, the attacked would only have access to the minecraft server, not all the other systems on the network. This would make it much harder for the attacker to move horizontally in OPs network.

Link to post
Share on other sites
10 hours ago, Paroxy said:

the server in the DMZ doesn't make the other computers on the network safer, it just makes the server a more accessible target.

You might be confusing 'consumer DMZ feature' with 'actual DMZ concept'.

 

Realistically he should be able to firewall into another zone at the edge and not permit new connections inbound from the DMZ to inside.  Port forwards would be contained to the DMZ.  That might take some logistical planning based on the equipment he has and the features available. 


PC : 3600 · Crosshair VI WiFi · 2x16GB RGB 3200 · 1080Ti SC2 · 1TB WD SN750 · EVGA 1600G2 · Define C 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×