NETGEAR FVS336Gv3 Reference Manual page 218

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3
rule informs the firewall to direct inbound traffic for a particular service to one local server
based on the destination port number. This process is known as port forwarding.
WARNING:
Allowing inbound services opens security holes in your network.
Enable only those ports that are necessary for your network.
The VPN firewall always blocks denial of service (DoS) attacks. A DoS attack does not
attempt to steal data or damage your computers but overloads your Internet connection so
that you cannot use it (that is, the service becomes unavailable). By default, multiple
concurrent connections of the same application from one host or IP address (such as multiple
DNS queries from one computer) trigger the VPN firewall's DoS protection. For information
about changing this default behavior, see
Attacks on page 268.
Whether or not DHCP is enabled, how the computer accesses the server's LAN address
impacts the inbound rules. For example:
• If your external IP address is assigned dynamically by your ISP (DHCP enabled), the IP
address might change periodically as the DHCP lease expires. Consider using Dynamic
DNS so that external users can always find your network (see
Connections on page 63).
• If the IP address of the local server computer is assigned by DHCP, it might change when
the computer is rebooted. To avoid this situation, configure a reserved IP address that is
bound to the MAC address of the server (see
• Local computers must access the local server by using the computers' local LAN
addresses. Attempts by local computers to access the server using the external WAN IP
address fail.
For more conceptual information about firewall protection, see
page 211.
Tip: For information about yet another way to allow certain types of
inbound traffic that would otherwise be blocked by the firewall, see
Manage Port Triggering
Note: Some residential broadband ISP accounts do not allow you to run any
server processes (such as a web or FTP server) from your location.
Your ISP might periodically check for servers and might suspend your
account if it discovers any active servers at your location. If you are
unsure, see the acceptable use policy of your ISP.
Manage Protection Against Common Network
DHCP Address Reservation
on page 327.
Customize Firewall Protection
218
Manage Dynamic DNS
on page 134).
Firewall Protection on