NETGEAR WGT624 v4, Руководство пользователя

Страница: 61 / 98

Super G Wireless Router WGT624 v4 User Manual
Advanced Configuration 5-7
v1.0, July 2008
The WAN setup options are explained below:
• Disable SPI Firewall.
Normally, this option should be enabled, so that your local network will be protected by the
stateful packet inspection (SPI) firewall included in the wireless router. However, certain
communications functions like VPN might require turning off the SPI feature.
• Default DMZ Server.
The default DMZ server feature is helpful when you use some online games and
videoconferencing applications that are incompatible with NAT. The router is programmed to
recognize some of these applications and to work properly with them, but there are other
applications that might not function well. In some cases, one local computer can run the
application properly if that computer’s IP address is entered as the default DMZ server.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Ports
menu. Instead of discarding this traffic, you can have it forwarded to one computer on your
network. This computer is called the default DMZ server.
• NAT Filtering.
This determines how your router handles inbound traffic. The Secured option provides a
secure firewall to protect the computers on the LAN from attacks from the Internet, but it
might cause some Internet games, point-to-point applications, or multimedia applications not
to work. The Open option provides less protection, but allows almost all Internet applications
to work.
• Assigning a Default DMZ Server. See “Assigning a Default DMZ Server” on page 5-8 .
Note: When SPI firewall is disabled, you must use the Passive mode in the computer
FTP client to connect to the FTP server.
Note: DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall, and is exposed to exploits
from the Internet. If compromised, the DMZ server can be used to attack your
network.