Most commercial routers have some simplified way of defining a local host as a DMZ host.
Incoming traffic on the wan side is forwarded to the DMZ host, while firewall rules will then prevent traffic from the DMZ host to the others on the LAN.
This is a fairly simple way of having a server exposed to the internet, while still being easily accessible from the LAN.
OpenWrt doesn’t have such an option, but it can be done.
(more…)