Netgear D6200 Wifi Dsl Modem Router User Manual

							Security 81
 D6200 WiFi DSL Modem Router
Keyword Blocking of HTTP Traffic
Use keyword blocking to prevent certain types of HTTP traffic from accessing your network. 
The blocking can be always or according to a schedule.
1.  Select  ADV
 ANCED > Security >  Block Sites.
2.  Select one of the keyword blocking options:
• Per Schedule. 
 Turn on keyword blocking according to the Schedule screen settings.
For more information, see Schedule for Firewall Rules on page  86.
• Always . 
 Turn on keyword blocking all the time, independent of the Schedule screen\
.
3.  In the Keyword field, enter a keyword or domain, and click  Add Keyword.
The Keyword list supports up to 32 entries. Here are some sample entries\
:
• Specify XXX to block http://www
 .badstuff.com/xxx.html.
• Specify .com if you want to allow only sites with domain suf
 fixes such as .edu or .gov.
• Enter a period ( .) to block all Internet browsing access.
4.  Click  Apply .
To delete a keyword or domain:
1. Select the keyword you want to delete from the list.
2.  Click  Delete Keyword.
3.  Click Apply
You can exempt one trusted computer from blocking and logging. The computer you exempt  must have a fixed IP address. 
						

							Security 
82 D6200 WiFi DSL Modem Router 
To specify a trusted computer:
1. In the Trusted IP Address field, enter the IP address.
2. Click Apply.
Firewall Rules
Services are functions performed by server computers at the request of client computers. For 
example, web servers serve web pages, time servers serve time and date information, and 
game hosts serve data about other players’ moves. When a computer on the Internet sends a 
request for service to a server computer, the requested service is identified by a service or 
port number. This number appears as the destination port number in the transmitted IP 
packets. For example, a packet that is sent with the destination port number 80 is an HTTP 
(web server) request. 
The service numbers for many common protocols are defined by the Internet Engineering 
Task Force (IETF at 
http://www.ietf.org/) and published in RFC1700, “Assigned Numbers.” 
Service numbers for other applications are typically chosen from the range 1024–65535 by 
the authors of the application. Although the WiFi DSL modem router already holds a list of 
many service port numbers, you are not limited to these choices. You can often determine 
port number information by contacting the publisher of the application, by asking user groups 
or newsgroups, or by searching.
Note:This feature is for advanced administrators only! Incorrect 
configuration can cause serious problems. 
						

							Security 83
 D6200 WiFi DSL Modem Router
To create firewall rules:
1. 
Select ADV
 ANCED > Security > Firewall Rules.
The Firewall Rules screen lists all firewall rule settings. The default rules allow all 
outgoing traffic and block all incoming traffic.
2.  Under Outbound Services, click  Add.
3. Configure the following settings:
• Service. Select the service or application to be covered by this rule. 
If the service or application you want does not appear in the list, you \
have to define it 
as described in  Add Custom Services to Allow or Block  on page
  85.
• Action. Select the action you want for traf
 fic covered by this rule:
- BLOCK always . 
 Always block the traffic covered by this rule. 
						

							Security 
84 D6200 WiFi DSL Modem Router 
-BLOCK by schedule, otherwise Allow. Allow the traffic covered by this rule, 
unless it is blocked according to the schedule specified on the Schedule screen. 
See Schedule for Firewall Rules on page
 86.
-ALLOW always. Always allow the traffic covered by this rule.
This selection is the default setting.
-ALLOW by schedule, otherwise Block. Block the traffic covered by this rule, 
unless it is blocked according to the schedule specified on the Schedule screen. 
See Schedule for Firewall Rules on page
 86.
ALLOW rules are useful only when the traffic is already covered by a BLOCK rule. 
You would use these rules when you want to allow a subset of traffic that is blocked 
by another rule.
•LAN Users. 
These settings determine which computers on your network are affected by this rule, 
based on their source (LAN) IP address. Select the option you want:
-Any. All local IP addresses are covered by this choice.
-Address range. You have to provide the Start and End fields when this option is 
selected.
-Single address. Enter the required address in the Start field.
•WAN Servers. 
These settings determine which Internet locations are covered by the rule, based on 
their destination (WAN) IP address. Select the option you want:
-Any. All Internet IP addresses are covered by this choice.
-Address range. You have to provide the Start and End fields when this option is 
selected.
-Single address. Enter the required address in the Start field.
•Log. 
This setting determines whether traffic covered by this rule is logged. Select the 
action you want:
•Always. Always log traffic that is covered by this rule, whether it matches or not. 
(This feature is useful when you are debugging your rules.)
•Never. Never log traffic covered by this rule, whether it matches or not.
•Click Apply.
Your changes take effect.
4. To allow or block an inbound service and to set up inbound firewall rules for gaming or other 
applications, under Inbound Services, click the here link.
You are redirected to the Port Forwarding/Port Triggering screen as described in Port 
Forwarding and Port Triggering on page 11 0. 
						

							Security 85
 D6200 WiFi DSL Modem Router
5. 
To close or open the instant messaging ports, under Instant Messaging (I\
M) Ports, select 
the appropriate radio button:
• Close IM Ports
• Open IM Ports (IM ports are open by default)
6.  Click  Apply .
Add Custom Services to Allow or Block
You can define your own incoming and outgoing custom services to allow or\
 block. To add a 
service for blocking, first determine which port number or range of numb\
ers is used by the 
application. 
To add a custom service:
1.  Select ADV
 ANCED > Security > Firewall Rules.
2.  Click  Add Custom Service. 
The Add Services screen allows you to specify or edit your own custom servic\
e definition. 
You can then use the custom service when creating firewall rules.
3.  In the Name field, enter a suitable name for this service.
4.  In the 
Type list, select the correct type for this service (if in doubt, select\
 TCP/UDP):
•TCP
• UDP
• TCP/UDP
5.  Enter the starting and ending port numbers. If the application uses a si\
ngle port number
 , 
enter that number in both fields.
6.  Click  Apply .
Your information is saved, and you return to the previous screen. 
						

							Security 86
D6200 WiFi DSL Modem Router 
Schedule for Firewall Rules
You can specify the days and time that you want to block Internet access.\
To specify the firewall rule schedule:
1. 
Select  ADV
 ANCED > Security > Schedule.
2. Set up the schedule for blocking keywords and services:
• Days to Block. Select days on which you want to apply blocking by selecting the 
appropriate check boxes, or select Every Day  to select the check boxes for all days. 
• T
ime of Day to Block. Select a start and end time in 24-hour format, or select  All 
Day for 24-hour blocking. 
3.  Select your time zone from the list. If you use daylight saving time, se\
lect the  Automatically 
adjust for daylight savings time  check box. 
4.  Click  Apply . 
						

							Security 87
 D6200 WiFi DSL Modem Router
Security Event Email Notifications
To receive logs and alerts by email, provide your email information in th\
e E-mail screen and 
specify which alerts you want to receive and how often. 
To set up email notifications:
1.  Select  ADV
 ANCED > Security >  E-mail.
2.  To receive email logs and alerts from the  WiFi DSL modem router, select the Turn E-mail 
Notification On  check box.
3.  In the 
Your Outgoing Mail Server field, enter the name of your ISP outgoing (SM\
TP) mail 
server (such as mail.myISP.com).
You might be able to find this information in the configuration screen of\
 your email  program. When you leave this field blank, log and alert messages are not\
 sent by email.
4.  In the Send to 
 This E-mail Address field, enter the email address to which logs and alerts 
are sent. 
This email address is also used for the From address. When you leave thi\
s field blank,  log and alert messages are not sent by email.
5.  If your outgoing email server requires authentication, select the  My Mail Server requires 
authentication  check box. 
Fill in the User Name and Password fields for the outgoing email server.
6.  (Optional) Under Send 
 Alert Immediately, select the check boxes for the kinds of alerts you 
want to receive.
You can have email alerts sent immediately when someone attempts to visit\
 a blocked  site and you can specify that logs are sent automatically
 . 
						

							Security 
88 D6200 WiFi DSL Modem Router 
7. (Optional) Under Send logs according to this schedule, specify how you want the logs sent 
to you.
If you select the Weekly, Daily, or Hourly option and the log fills up before the specified 
period, the log is automatically emailed to the specified email address. After the log is 
sent, the log is cleared from the WiFi DSL modem router’s memory. If the WiFi DSL 
modem router cannot email the log file, the log buffer might fill up. In this case, the WiFi 
DSL modem router overwrites the log and discards its contents.
8. Click Apply. 
						

							89
8
8.   Administration
Manage your network
This chapter describes the settings for administering and maintaining your WiFi DSL modem 
router and home network. 
This chapter includes the following sections:
•Upgrade the WiFi DSL Modem Router Firmware 
•View WiFi DSL Modem Router Status 
•View VPN Status 
•View Logs of Web Access or Attempted Web Access 
•Manage the Configuration File 
•Set Password 
•Diagnostics 
Related information for administering and maintaining your WiFi DSL modem router and home 
network is described in separate chapters:
•For information about the devices connected to your WiFi DSL modem router and home 
network, see 
Attached Devices on page 31.
•For information about upgrading or checking the status of your WiFi DSL modem router 
over the Internet, see 
Remote Management on page 124.
•For information about monitoring the volume of Internet traffic passing through your WiFi 
DSL modem router’s Internet port, see 
Traffic Meter on page 128. 
						

							Administration 90
D6200 WiFi DSL Modem Router 
Upgrade the WiFi DSL Modem Router Firmware
The WiFi DSL modem router firmware (routing software) is stored in fla\
sh memory. You can 
update the firmware from the Administration menu on the Advanced tab. You might see a 
message at the top of the genie screens when new firmware is available f\
or your product.
You can use the Check button on the Firmware Upgrade screen to check and \
update to the  latest firmware for your product when new firmware is available. 
To check for new firmware and update your WiFi DSL modem router:
1.  Select  ADV
 ANCED > Administration > Router Update.
Click Check.
2. Click  Check .
The WiFi DSL modem router finds new firmware information if any is avail\
able.
3.  Click  Ye
 s.
The firmware you downloaded is stored on your computer (the file ends i\
n .img). 
WARNING:
When uploading firmware to the WiFi DSL modem router,  do not 
interrupt the web browser by closing the window, clicking a link, or 
loading a new page. If the browser is interrupted, it could corrupt 
the firmware.