Ubiquiti UniFi Gateway - Port Forwarding and Firewall (ZBF/Zone-Based Firewall)

Ubiquiti UniFi - Zone-Based Firewall And iptables
• Ubiquiti UniFi - Zone-...
Ubiquiti UniFi Gateway - DNAT and Port Forwarding
• Ubiquiti UniFi Gateway...

[@weholmes5315]

So prolific! Your frequent and informative videos are most helpful and appreciated! I'm getting more confident and comfortable working on my UniFi network.😊

[@mcury85]

Thanks once again !! The weirdest thing is that I'm just configuring my first shinny new Unifi Gateway Ultra.. No better time for this video release 👍

[@mingscustoms]

What do you do for your job? You have a wealth of knowledge

[@hamdicarlo]

I love your vides so much. Really amazing work and way of explaining things. I want to ask if you can do a video tutorial of your VMs setup if possible

[@hz777]

I already had two videos about migration from esxi to proxmox. I am going to create a new one focusing on network testing

[@glennrempe5360]

To clarify, is there anything "special" about the "DMZ" zone? Or is it just a logical grouping for convenience of building a mental model. In other words, would everything work the same if VLAN 30 was in Default or any other zone with port forwarding pointing to the IP of the host in that VLAN? PS. I am one week into my Unify journey (background in software dev) and I have found your channel to be an absolute GOLD MINE of information. I have watched 25+ videos at this point. Your presentations touch on every pertinent point in just the right way to give all the info the viewer needs. You may or may not know it, but you are very good at this. Keep it up. Thank you.👏👏👏

[@hz777]

Technically it's just a logical layer to group multiple VLANs, but because the builtin firewall policies (the ones with lock icons) cannot be modified, the DMZ zone has its real world meaning.

[@jellevanburen9427]

Ah thank you for this great video! Why is there also a dnat option besides the port forward option which also does dnat?!?

[@hz777]

Because port forwarding is just one of the use cases of DNAT.

[@marc3793]

Do you do UniFi installs for a job or just a hobby? Because you go into a lot of detail, even for a homelaber! (And have a lot of UniFi gear)

[@hz777]

My day job has nothing to do with network.

[@marc3793]

@hz777 even more impressed then! Thanks for your efforts.

[@stephanmuller4189]

New video please for pihole and iot Firewall

[@hz777]

Search my channel you can find a video for pihole and VLAN, where very detailed firewall rules are discussed. Even though it's not for ZBF, the same idea applies. Do you see the need to have a dedicated one for ZBF?

[@1stGruhn]

@@hz777 given how so few have uploaded anything about zone-based firewalls yet, it might not be a bad idea to do an update video for the youtube algorithm.

[@hz777]

Thanks for the suggestion. I create videos for fun, instead of for more views or beating youtube algorithms :) Let me see what I can do about pihole and ZBF.