A DMZ host receives all inbound traffic that doesn't match other port forwarding rules.
How it works:
- You designate one internal IP as DMZ host
- Any inbound connection without specific mapping goes there
- The DMZ host is fully exposed to the internet
Use cases:
- Game consoles needing many ports
- Troubleshooting connectivity issues
- Devices with their own firewall
Security warning: The DMZ host has no NAT protection. Every port is exposed. Only use for:
- Devices with strong built-in security
- Dedicated firewall appliances
- Temporary troubleshooting
Never put a regular computer in the DMZ.