[Diggory Laycock]

Hi.

You can see the genesis of this thread here:

http://forums.macnn.com/showthread.p...hreadid=247032

I think I may be having problems with my set-up of my router.

Info & Background:
----------------
I have recently changed DSL providers - I have static IPs (both with the Old ISP and the new.)

My old ISP provided me with a basic, but fantastic router (Lucent/Ascend CellPipe 20-A-GX-E ) which just worked. I didn't use it for DHCP (I used a mixture of a few static IPs and let Airport allocate the others by DHCP).

I cannot alter the settings on the cellpipe - as it was provided to me pre-configured by the old ISP and I don't know the password (the default one appears from my Googling to be 'Ascend' - but that doesn't work.)

In the end I bought a new router (NetGear DG632) without doing much research - assuming that it would do the basics just fine.

However - it seems not to work properly - Most of the time it will appear to work properly, but occasionally I lose all connectivity, and have to visit the router's web admin - which seems to get things going again.


I host a few domains on a G4 on this network. The G4 has a static IP.

It also appears that the G4 can connect to the wider internet - but hosts from outside my LAN cannot reach the G4.

I know this from the Lounge post earlier and because the W3.org validator cannot reach the g4 - either using a DNS name - or using the IP addr.

http://jigsaw.w3.org/css-validator/v...12.158.229.84/
http://validator.w3.org/check?uri=ht...onkeyfood.com/


What have I done wrong?

[edit] - images removed (security)

[Sherwin]

Quick questions:
What ISP are you using and are they using port blocking at their end?

[effgee]

I suppose you've done all the usual troubleshooting and checking for new firmware as mentioned on Netgear's support page?

[Sherwin]

Never mind. I found the answer to the question I wrote here.

[Diggory Laycock]

Using BullDog - No port blocking afaik.

I have the latest firmware.

However on reading that Netgear site - I get the impression that the FireWall is permanently on.

I dont seem to be allowed to turn it off. Grrrr......

I don't want to have to set up rules for every kind of connection on every host ...

Argh - why can't the router just route.

[Sherwin]

Originally posted by Diggory Laycock:
Using BullDog - No port blocking afaik.

I have the latest firmware.

However on reading that Netgear site - I get the impression that the FireWall is permanently on.

I dont seem to be allowed to turn it off. Grrrr......

I don't want to have to set up rules for every kind of connection on every host ...

Argh - why can't the router just route.

Take it back and go grab a 3com jobbie? Their OfficeConnect router 3CRWDR100A-72 is about 100 quid if I remember rightly. I read the manual a while back and it looks like it'd do ya.

(I'm using an Intertex IX66 which I know you'll have no problems doing what you want with it, but they're about 200 quid at the mo - not sure you'd want to splash out that much)

[Jellytussle]

If that's your router config and you're using NAT, then surely your LAN setup will be a private range (192.168.x.x or similar) and you WAN config will be the external address your ISP gives you.

[Jellytussle]

OK, had a look at that box on the NetGear site, and it runs as a NAT box. Your best bet might be to simply factory reset the router and rerun its wizard, letting it make the decisions. I seem to recall that UK ADSL services are always DHCP configured, even if you've been given a static IP - it's allocated from your ISPs server. Once you know you can get on the 'net, then set up a port forward through the firewall on port 80, pointed to the internal address of your http server.

PS is your name Maxwell? My youngest son is a Maxwell, and you don't come across too many.

[Sherwin]

It's working right now Diggory (both off IP and monkeyfood). You musta cracked it.

[Diggory Laycock]

OK - Thanks guys - I think I've got a handle on this.

The thing that stumped me was the fact that there was no Firewall on/off option - so I assumed that because I hadn't set it up - it wouldn't be blocking anything.

In fact it's the opposite - you have to set up rules to allow everything.

I can understand why they don't have a "firewall off" option.... Windows.


I'm not using NAT.

My name is not Maxwell -- it's part of the surname of a friend of mine

[ghporter]

Originally posted by Diggory Laycock:
OK - Thanks guys - I think I've got a handle on this.

The thing that stumped me was the fact that there was no Firewall on/off option - so I assumed that because I hadn't set it up - it wouldn't be blocking anything.

In fact it's the opposite - you have to set up rules to allow everything.

I can understand why they don't have a "firewall off" option.... Windows.


I'm not using NAT.

My name is not Maxwell -- it's part of the surname of a friend of mine

Having the firewall on and locked down by default is to keep morons uneducated users from exposing their entire systems to the Internet when they though the "firewall thingy" would protect them. If you have to actively allow all connections (and that process will take a fairly short time), then you not only are protected, you know what's supposed to be getting through the firewall.

I don't understand your comment about Windows, though. It just doesn't make any connection for me.