NETGEAR FWG114P Reference Manual page 88

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P
If disabled, you must connect manually, using the sub-screen accessed from the Router Status
menu "Show WAN Status" screen.
• Setting Up a Default DMZ Server
Note: DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall, and is exposed to exploits from the
Internet. If compromised, the DMZ server can be used to attack your network.
The use of the term 'DMZ' has become common, although it is a misnomer. In traditional
firewalls, a DMZ is actually a separate physical network port. A true DMZ port is for
connecting servers that require greater access from the outside, and will therefore be provided
with a different level of security by the firewall. A better term for our application is Exposed
Host.
The default DMZ server feature is helpful when using some online games and
videoconferencing applications that are incompatible with NAT. The router is programmed to
recognize some of these applications and to work properly with them, but there are other
applications that may not function well. In some cases, one local PC can run the application
properly if that PC's IP address is entered as the default DMZ server.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Ports
menu. Instead of discarding this traffic, you can have it forwarded to one computer on your
network. This computer is called the Default DMZ Server.
The WAN Setup menu, shown below lets you configure a Default DMZ Server.
To assign a computer or server to be a Default DMZ server, follow these steps:
Click WAN Setup link on the Advanced section of the main menu.
1.
Type the IP address for that server. To remove the default DMZ server, replace the IP
2.
address numbers with all zeros.
Click Apply.
3.
• Respond to Ping on Internet WAN Port
If you want the router to respond to a 'ping' from the Internet, click the 'Respond to Ping on
Internet WAN Port' check box. This should only be used as a diagnostic tool, since it allows
your router to be discovered. Don't check this box unless you have a specific reason to do so.
8-2
M-10177-01
Advanced Configuration