AT&T Inidv2 I3812v Urer Guide

							37
Configuring Firewall
The i3812V includes default firewall settings that block unwanted access from the Internet; it is 
recommended that you leave the default settings in place. If necessar y, you can allow Internet traffic or 
users through the firewall to your LAN devices, applications, and ser vers. This section provides instructions 
to: 
 Host an application on your network to allow users access on page 38
 Remove an application on your network to block users access on page 38
 Define an application profile on page 41
 Add multiple definitions to a profile on page 45
 Delete a user-defined application profile on page 48
 Allow all applications (DMZplus) on page 49
 Stop DMZplus on page 51
 Customize firewall settings on page 52
Caution:  You should be knowledgeable with the firewall configuration to 
modify these settings; otherwise, you are exposing your computer to outside 
attacks.  
						

							iNID -- i3812V User Guide
38
Hosting an Application
To allow access from the Internet to applications running on computers inside your home network, you need 
to open firewall pinholes and associate the intended application(s) with a computer connected with your 
i3812V. If you cannot find a listing for your application, you can define an application with the protocol and 
port information (refer to Defining a New Application Profile on page 41.)
To host an application:
1.Open a Web browser and enter http://gateway.2Wire.net to access the 2Wire i3812V user interface. 
2.Click   on the Home page; the Firewall Status page opens. 
						

							Configuring Firewall
39
3.Select Applications, Pinholes and DMZ; a page similar to the following opens showing the computers 
that are connected to the i38HG/i3812V and the application list. 
						

							iNID -- i3812V User Guide
40
4.Select the computer that you want to host the application(s). 
5.Select Allow individual application(s). 
6.Filter the application list by selecting the category; your selection is displayed in the Application List 
panel. 
7.Select from the Application List panel the application(s) you want to host. 
8.Click Add; the application(s) you selected appears in the Hosted Applications panel. 
9.Click Save; a message appears informing you the status. 
Removing Hosted Applications
1.Open a Web browser and enter http://gateway.2Wire.net to access the 2Wire i3812V user interface. 
2.Click   on the Home page; the Firewall Status page opens, displaying the current hosted application 
settings. 
Note: If the computer you want to select is unlisted because it is powered 
off and the “hide inactive devices” option is enabled; you still can select it as 
long as it is on the same network and you know its IP address. Replace 
“Enter IP address” with the intended IP address, then click 
Choose. 
Note: To select multiple applications, hold down the [Shift] or [Ctrl] keys 
while making your selections. Using the [Shift] key lets you make your 
selections in a contiguous order while the [Ctrl] key selects the groups in a 
random order. 
						

							Configuring Firewall
41
3.Select Applications, Pinholes and DMZ; a page opens showing hosted applications. 
4.Select the hosting computer if you do not see the pinhole you want to remove in the list. 
5.Scroll to the Edit firewall settings for this computer pane. 
6.Select the application(s) you want to remove from the Hosted Applications panel, click Remove.
7.Click Save; a message appears informing you the status. The application(s) you selected is removed 
from the Hosted Applications panel and returned to the Application List panel. 
Defining a New Application Profile
An application profile configures your system’s firewall to pass through application-specific data. You can 
define an application profile that is not included in the Application List. This feature is typically used if the 
application for which you would like to pass through data to a given computer is new or has been recently 
updated to a new version.
Note: To select multiple applications, hold down the [Shift] or [Ctrl] keys 
while making your selections. Using the [Shift] key lets you make your 
selections in a contiguous order while the [Ctrl] key selects the groups in a 
random order. 
						

							iNID -- i3812V User Guide
42
To add a new application profile:
1.Open a Web browser and enter http://gateway.2Wire.net to access the 2Wire i3812V user interface. 
2.Click   on the Home page; the Firewall Status page opens. 
3.Select Applications, Pinholes and DMZ; a page opens showing the computers that are connected to 
your i38HG/i3812V and the application list. 
4.Scroll down and click Add a new user-defined application; the Firewall Application Profile Definition page 
opens. 
						

							Configuring Firewall
43
5.Enter the application profile name in the Application Profile Name field. 
6.Create a definition for your application that is to be allowed through the firewall. 
−In the 
Protocol field, select the TCP or UDP radio button. If the application you are adding requires 
both, you need to create a separate definition for each.
−In the 
Por t (or Range) field, enter the por t or por t range the application uses. For example, some 
applications requires only one por t to be opened (such as TCP por t 500); others require that all 
TCP ports from 600 to 1000 be opened. 
−In the 
Protocol Timeout (seconds) field, optionally enter a value for the amount of time that can pass 
before the application “times out.” When leaving the field blank, the system uses the default 
values (86400 seconds for the TCP protocol; 600 seconds for the UDP protocol). 
−In the 
Map to Host Port field, enter a value that maps the por t range you established in the Port field 
to the local computer. For example, if you set the value to 4000 and the por t range being opened is 
100 to 108, the forwarded data to the first value in the range will be sent to 4000. Subsequent 
ports will be mapped accordingly; 101 will be sent to 4001, 102 will be sent to 4002, and so for th.
−From the 
Application Type drop-down list, select the application type. If you do not know the 
application type, select nothing.
Notes: For easy identification, use the name of the application (for example, 
Redwing Game Server). 
Clicking 
Back returns to the Allow device application traffic to pass through 
firewall page. 
Note: If only one por t is required, enter the por t number in the From field. 
Note: You can find the above information in the documentation provided by 
the company that produces the application. 
						

							iNID -- i3812V User Guide
44
7.Click Add to List; a message appears informing you of the status and the information appears in the 
Definition List pane. For example,  
						

							Configuring Firewall
45
Adding Multiple Definitions to a Profile
Some application requires both TCP and UDP por ts. In this case, you need to define additional ports to an 
existing profile. You can add the definition of the profile only when it has not been added to the hosted 
application list. If the profile is added to the hosted application list and you want to modify it, you need to 
first remove it from the Hosted Applications panel. 
1.Open a Web browser and enter http://gateway.2Wire.net to access the 2Wire i3812V user interface. 
2.Click   on the Home page; the Firewall Status page opens. 
3.Select Applications, Pinholes and DMZ; a page opens showing hosted applications.  
						

							iNID -- i3812V User Guide
46
4.Scroll to the Edit firewall settings for this computer pane. 
5.Click Edit or delete user-defined application; a page similar to the following opens. 
Note: If you have not created any profiles, the link will not appear.
Note: The application you created will not appear here if it has been added 
to the Hosted Applications. Return to the previous page, select the 
application intended for modification, click 
Remove to return the application 
to the available application list.