Billion BiPAC 7800NL, Руководство пользователя

Страница: 85 / 170

82
DMZ Host
The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP
address as the DMZ Host, all incoming packets will be checked by the Firewall and NAT algorithms
then passed to the DMZ host, when a packet received does not use a port number used by any
other Virtual Server entries.
DMZ Host IP Address: Enter the IP Address of a host you want it to be a DMZ host.
Using port mapping does have security implications, since outside users are
able to connect to PCs on your network. For this reason you are advised to use
specific Virtual Server entries just for the ports your application requires instead
of simply using DMZ or creating a Virtual Server entry for “All” protocols, as
doing so results in all connection attempts to your public IP address accessing
the specified PC.
If you have disabled the NAT option in the WAN-ISP section, the Virtual Server
function will hence be invalid.
If the DHCP server option is enabled, you have to be very careful in assigning
the IP addresses of the virtual servers in order to avoid conflicts. The easiest way
of configuring Virtual Servers is to manually assign static IP address to each
virtual server PC, with an address that does not fall into the range of IP
addresses that are to be issued by the DHCP server. You can configure the
virtual server IP address manually, but it must still be in the same subnet as the
router.
Attention