4. Web Configuration
41
4.7 Forwarding
This page allows you to configure the Forwarding and DMZ
(De-Militarized Zone) features. Unlike Filter which governs
outgoing traffic, Forwarding is used to provide external access to
your local machines. This is commonly used when you have
publicly accessible virtual servers on your local network.
By default, forwarding entry is empty and any external access to
your LAN is blocked. Once you define a forwarding entry, incoming
packets (identified by its port number) that match your Forwarding
criteria will be forwarded to the port range of the specified local
machine. Otherwise packets are blocked. Forwarding serves as a
measure of security that protects your network from hazardous
packets.
However, if you designate a DMZ sever, incoming packets that do
not match the forwarding criteria will be redirected to the DMZ IP
address. That is, forwarding demands a higher priority than DMZ.
Setting Up Forwarding Entries
To set up your forwarding entries, enter these fields:
DMZ IP Address:
DMZ setting allows a local machine to be
exposed to the Internet. If you specify a DMZ host here, the
incoming packets containing no port information specified in the
Forwarding table are forwarded to the DMZ host.
TCP Port Forwards:
In the first
Start
and
End
fields, define the
port range for the incoming TCP service you want to forward. In the
IP Address
filed, enter the IP address of the virtual server to which
packets are forwarded. The
Start
/
End
fields on right side define
the port range for the TCP service on the virtual server.
For example, you have a virtual server 192.168.1.210 running FTP
service and you allow external access by the setting below:
Start
End
IP Address
Start
End
20 21
192.168.1.210
20 21
