Question

Provide an example of a common firewall rule to protect a web server in a DMZ.

Answer 1

To protect a web server in a DMZ, you might create a rule like this using a firewall management tool:

Here's an example using ufw in Ubuntu:

ufw allow from any to DMZ_IP_ADDRESS port 80,443 proto tcp
 

• Allow incoming traffic on port 80 (HTTP) and port 443 (HTTPS) from any source to the web server's IP address in the DMZ.