NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual page 90

Reference Manual for the ProSafe VPN Firewall 200 FVX538
Note: For security, NETGEAR strongly recommends that you avoid creating an exposed host.
When a computer is designated as the exposed host, it loses much of the protection of the firewall
and is exposed to many exploits from the Internet. If compromised, the computer can be used to
attack your network.
1. Select All protocols and ALLOW Always (or Allow by Schedule)
2. Place rule below all other inbound rules
Figure 6-7: Rule example: exposed host
Considerations for Inbound Rules
• If your external IP address is assigned dynamically by your ISP, the IP address may change
periodically as the DHCP lease expires. Consider using the Dyamic DNS feature in the
Advanced menus so that external users can always find your network.
• If the IP address of the local server PC is assigned by DHCP, it may change when the PC is
rebooted. To avoid this, use the Reserved IP address feature in the LAN IP menu to keep the
PC's IP address constant.
• Local PCs must access the local server using the PCs' local LAN address (192.168.0.99 in this
example). Attempts by local PCs to access the server using the external WAN IP address will
fail.
6-12 Firewall Protection and Content Filtering
January 2005