Disabling Port Scan And Dos Protection; Setting Up A Default Dmz Server - NETGEAR WNR1000v3h2 User Manual

N150 Wireless Router User Manual
Figure 4.

Disabling Port Scan and DoS Protection

The DoS firewall protects your network and computers against attacks and intrusions. A
stateful packet firewall carefully inspects incoming traffic packets, looking for known exploits
such as malformed, oversized, or out-of-sequence packets. The firewall should be disabled
only in special circumstances, such as when you are troubleshooting application issues.

Setting Up a Default DMZ Server

The default DMZ server feature is helpful when you are using some online games and
videoconferencing applications that are incompatible with Network Address Translation
(NAT). The router is programmed to recognize some of these applications and to work
correctly with them, but there are other applications that might not function well. In some
cases, one local computer can run the application correctly if that computer's IP address is
entered as the default DMZ server.
WARNING!
DMZ servers pose a security risk. A computer designated as the
default DMZ server loses much of the protection of the firewall,
and is exposed to exploits from the Internet. If compromised, the
DMZ server computer can be used to attack other computers on
your network.
Incoming traffic from the Internet is usually discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Port
Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have it
forwarded to one computer on your network. This computer is called the default DMZ server.
The WAN Setup screen lets you configure a default DMZ server.
Chapter 4: Customizing Your Network Settings | 53