iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Figure 5.16 DMZ Host
2. Select the check box, and enter the local IP address of the computer that you would like to
designate as a DMZ host. Note that only one LAN computer may be a DMZ host at any
time.
3. Click ‘OK’ to save the settings.
You can disable the DMZ host so that it will not be fully exposed to the Internet, but will keep its IP
address recorded in the ‘DMZ Host’ screen. To do so, clear the check box next to the DMZ IP field,
and click ‘OK’. This may be useful if you wish to temporarily disable the DMZ host, intending to
enable it again in the future. To reinstate it at a later time, reselect the check box.
5.2.5 Using Port Triggering
Port triggering is used for setting a dynamic port forwarding configuration. By setting port triggering
rules, you can allow inbound traffic to arrive at a specific LAN host, using ports different than those
used for the outbound traffic. This is called port triggering since the outbound traffic triggers to
which ports inbound traffic is directed.
For example, consider a gaming server that is accessed using the UDP protocol on port 2222. The
gaming server responds by connecting the user using UDP on port 3333, when starting gaming
sessions. In such a case you must use port triggering, since this scenario conflicts with the
following default firewall settings:
• The firewall blocks inbound traffic by default.
• The server replies to iPECS SBG-1000’s IP, and the connection is not sent back to your host,
since it is not part of a session.
In order to solve this, you need to define a Port Triggering entry, which allows inbound traffic on
UDP port 3333 only after a LAN host generated traffic to UDP port 2222. To do so, perform the
following:
1. Click the ‘Port Triggering’ link under the ‘Firewall’ menu item. The ‘Port Triggering’ screen
appears. This screen will list all of the port triggering entries.
45