Network Access Rules Options - NETGEAR FR314 Reference Manual

Reference Guide for the Model FR314, FR318 and FV318 Cable/DSL Firewall and VPN Routers
The Services window allows you to customize Network Access Rules by service. The Default rule,
at the bottom of the table, encompasses all Services.

Network Access Rules Options

This section describes the options you can configure in the Network Access Rules window. For
procedural information, also see
and "Adding a Service" on
• LAN Out
If a LAN Out check box is checked (the default), users on your LAN are able to access that
service on the Internet. Otherwise, they are blocked from accessing that service.
• LAN In
The LAN In column is not visible when NAT is enabled (the default). If a LAN In check box
is checked, users on the Internet may access all computers on your LAN for that service. By
default, LAN In check boxes are not checked; use caution when enabling this option.
• Public LAN Server
A Public LAN Server is a server on your network that is designated to receive inbound traffic
for a specific service, such as Web access or e-mail. You may define a Public LAN Server by
entering the server's IP address in the Public LAN Server box for the appropriate service. If
you do not have a Public LAN Server for a service, enter "0.0.0.0" in the box. See
Public LAN Server (Port
• Network Connection Inactivity Timeout
If a connection to a remote server remains idle for more than five minutes, the firewall router
closes the connection. Without this timeout, Internet connections could stay open indefinitely
and create potential security holes. You may increase the Inactivity Timeout if applications,
such as Telnet and FTP, are frequently disconnected.
• Detection Prevention
To prevent all unforwarded ports from responding to outside requests, check the box titled
"Enable Stealth Mode." Please refer to
considerations on the use of this mode.
• Exclude IP Address from Node License count
If your local network contains active IP devices that do not require Internet access, such as
print servers, enter those IP addresses here to prevent these devices from being counted toward
your maximum node count. Please refer to
on the use of this feature.
Network Access Rules
"Creating a Public LAN Server (Port
page 7-5.
Forwarding)," next for more information.
"Stealth Mode" on page 7-7
"Node License Count" on page 7-8
Forwarding)" on page 7-4
"Creating a
for details and
for details and
7-3