NETGEAR ProSafe Quad WAN FR538G Reference Manual page 78

ProSafe Quad WAN Gigabit Firewall FR538G Reference Manual
Table 4-2. Inbound Rules (continued)
Item Description
WAN Users These settings determine which Internet locations are covered by the rule, based on
their IP addresses. Select the desired option:
• Any – All Internet IP address are covered by this rule.
• Single address – Enter the required address in the start field.
• Address range – If this option is selected, you must enter the start and end fields.
WAN Destination IP This setting determines the destination IP address applicable to incoming traffic.
Address This is the public IP address that will map to the internal LAN server; it can either be
the address of the WAN1, WAN2, WAN3 or WAN4 ports or another public IP
address
map traffic coming from a particular WAN port to a DMZ machine
Log This determines whether packets covered by this rule are logged. Select the desired
action:
• Always – Always log traffic considered by this rule, whether it matches or not. This
• Never – Never log traffic considered by this rule, whether it matches or not.
Note: Some residential broadband ISP accounts do not allow you to run any server
processes (such as a Web or FTP server) from your location. Your ISP may
periodically check for servers and may suspend your account if it discovers any
active services at your location. If you are unsure, refer to the Acceptable Use
Policy of your ISP.
Remember that allowing inbound services opens holes in your quad WAN gigabit firewall. Only
enable those ports that are necessary for your network. It is also advisable to turn on the server
application security and invoke the user password or privilege levels, if provided.
4-6
.
This field is only populated under NAT mode because the router needs to
is useful when debugging your rules.
v1.0, November 2007
Firewall Protection and Content Filtering