port forwarding firewall

port forwarding and dmz explained for home networking

Menu: Main Functions   Internet Sharing   Computer Networking   Shopping   About Us  
Explaining DMZ’s and Port Forwarding
for home networking, broadband routers, and NAT connection sharing
First some definitions (greatly simplified)
Ports: Applications running on TCP/IP open connections to other computers using something called ports. Ports allow multiple applications to reside on a single computer - all talking TCP/IP. Ports are another set of numbers AFTER the standard IP address. Applications often hide these port numbers to reduce the complexity of TCP/IP. Example: web services (HTTP) reside on port 80 by default. To reach this web site, you could type http://www.homenethelp.com:80 into your browser. The 80 is the default port number for the HTTP protocol so typing it is not necessary. There are 65535 available ports. Here is a list of some ‘well known ports’. 
Port Forwarding: A broadband router or other NAT application (like ICS) creates a firewall between your internal network and the internet. A firewall keeps unwanted traffic from the internet away from your LAN computers.  A ‘tunnel’ can be created through your firewall so that the computers on the Internet can communicate to one of the computers on your LAN on a single port. This is handy for running web servers, game servers, ftp servers, or even video conferencing. This is called port forwarding. One of your computers could run a web server (port 80) while another computer could run an FTP server (port 23) - both on the same IP address.
DMZ: This is a feature that is included on some routers but is not in Internet sharing software. A DMZ allows a single computer on your LAN to expose ALL of its ports to the Internet. When doing this, the exposed computer is no longer ‘behind’ the firewall.
Port Forwarding vs DMZ
A DMZ is far easier to set up than port forwarding but exposes your entire computer to the Internet. Sometimes TCP/IP applications require very specialized IP configurations that are difficult to set up or are not supported by your router. In this case, placing your computer in the DMZ is the only way to get the application working. Placing a computer in the DMZ should be considered ‘temporary’ because your firewall is no longer able to provide any security to it.
Port forwarding can sometimes be difficult to configure, but provides a relatively safe way of running a server from behind a firewall. Since only a single port (or small series of ports) is exposed to the Internet, the computer is easier to secure. Additionally, port forwarding allows you to run multiple kinds of servers from different computers on your lan. (see above diagram)
Many broadband routers have special port forwarding configuration screens for standard applications (FTP, WWW, Mail, etc) and special screens for custom applications.
Other References:
Network Basics and Infrastructure FAQ
How TCP/IP works (RFC793)
List of Well Known Ports
 

Applications and Games
Below is a list of ports used for many applications and games.  This is a list of the most common configurations needed to use the applications from behind a NAT based sharing device like a CALE/DSL ROUTER or Microsft ICS.  Most applications work fine without configuration when making an outgoing connection.  All applications need some kind of port forwarding when you need to act as a server to take incomming connections.
If you need more help than what is provided here, take it to the Message Forums, don't write me directly.
Google
Web HomeNetHelp
Cable/DSL Router Rebates
Cable/DSL Router Rebates
199 comments
port forwarding and dmz explained for home networking
FTP port by Rand - 3/19/2002 3:19:00 PM
Re: FTP port problems.. by Rox - 8/29/2004 7:11:00 AM
What does STATIC IP address means? by Somchai - 5/28/2002 10:00:00 AM
Re: What does STATIC IP address means? by just brows'n - 5/28/2002 6:52:00 PM
Re: What does STATIC IP address means? by xedos - 11/27/2003 2:09:00 PM
Re: What does STATIC IP address means? by DSL_Ripper - 10/28/2004 8:05:00 AM
Re: What does STATIC IP address means? by Phil - 11/7/2004 6:28:00 PM
Re: What does STATIC IP address means? by Jason P. - 11/28/2005 6:15:00 PM
Re: What does STATIC IP address means? by Airtel_guy - 12/13/2005 10:32:00 AM
Re: What does STATIC IP address means? by zameer - 1/3/2005 3:30:00 AM
Re: What does STATIC IP address means? by hitesh - 4/22/2005 11:05:00 PM
Re: What does STATIC IP address means? by jacob - 8/9/2005 6:05:00 PM
Re: What does STATIC IP address means? by Kevin - 9/1/2005 11:31:00 AM
NAT and ISP dynamic IP by Baran - 5/30/2002 10:43:00 AM
Re: NAT and ISP dynamic IP by joker - 7/29/2002 11:38:00 PM
dynamic ip and NAT configs by Baran - 5/30/2002 10:45:00 AM
Re: dynamic ip and NAT configs by Mo - 6/8/2002 2:10:00 PM
Re: dynamic ip and NAT configs by elvis - 7/1/2002 10:07:00 PM
ICS on XP by Ryder - 7/14/2002 11:29:00 PM
Re: ICS on XP by rob - 8/5/2002 11:11:00 PM
Re: ICS on XP by larry - 8/19/2002 1:04:00 AM
H.323 by Adam Kimber - 8/11/2002 6:59:00 AM
Re: H.323 by Sparkitup - 1/30/2004 8:33:00 PM
Multiple Web servers on different internal ips by David - 8/24/2002 10:34:00 PM
Re: Multiple Web servers on different internal ips by aceindy - 10/7/2002 5:54:00 PM
Re: Multiple Web servers on different internal ips by Ben Samuel - 7/16/2003 5:14:00 PM
Re: Multiple Web servers on different internal ips by Coizado - 3/25/2005 7:02:00 PM
msn & ports by boiert - 9/21/2002 1:35:00 PM
Re: msn & ports by Dan - 9/30/2002 9:28:00 AM
Re: msn & ports by inetsathi - 2/6/2005 1:29:00 AM
Re: msn & ports by marcus - 6/27/2004 11:34:00 PM
Hotline Server Ports by Anders - 10/3/2002 4:51:00 AM
Forwarding FTP Different Port by Mike - 10/4/2002 4:24:00 PM
Re: Forwarding FTP Different Port by Aceindy - 10/18/2002 7:06:00 AM
Web Server config with router by Anthony Smith - 10/25/2002 9:45:00 AM
Re: Web Server config with router by Jimmy Ng - 12/28/2002 12:16:00 AM
Re: Web Server config with router by ketuketeh - 12/3/2003 3:25:00 PM
Re: Web Server config with router by Hitesh - 4/21/2005 11:10:00 AM
DSL WEBSERVER SETUP by Marty Sutton - 10/26/2002 12:19:00 AM
Re: DSL WEBSERVER SETUP by GolgothA - 11/26/2002 10:58:00 AM
2 pc's, 1 router i want 2 play games by Chad Bridge - 11/1/2002 10:49:00 AM
Re: 2 pc's, 1 router i want 2 play games by horseman - 11/17/2002 3:42:00 PM
NetGear DSL (port forwarding issue) by Stoner - 11/10/2002 11:25:00 AM
Re: NetGear DSL (port forwarding issue) by Steve Ball - 11/16/2002 10:39:00 AM
Re: NetGear DSL (port forwarding issue) by alexray - 12/20/2002 11:12:00 AM
Re: NetGear DSL (port forwarding issue) by BaNdy - 12/24/2002 3:58:00 AM
Re: NetGear DSL (port forwarding issue) by baNdy - 12/24/2002 4:01:00 AM
Re: NetGear DSL (port forwarding issue) by Seb - 1/16/2005 1:15:00 AM
Re: NetGear DSL (port forwarding issue) by Seb - 1/16/2005 1:17:00 AM
Re: NetGear DSL (port forwarding issue) by Seb. - 1/16/2005 1:18:00 AM
Re: NetGear DSL (port forwarding issue) by Pix1mil - 1/27/2005 4:04:00 PM
Re: NetGear DSL (port forwarding issue) by JS - 2/2/2005 10:20:00 AM
Re: NetGear DSL (port forwarding issue) by steve - 3/3/2005 12:59:00 AM
Re: NetGear DSL (port forwarding issue) by TJ - 3/17/2005 3:14:00 PM
Re: NetGear DSL (port forwarding issue) by endang - 6/3/2006 1:38:00 AM
Re: NetGear DSL (port forwarding issue) by Maria L - 11/7/2005 9:01:00 AM
Re: NetGear DSL (port forwarding issue) by Maria L - 11/7/2005 9:01:00 AM
Re: NetGear DSL (port forwarding issue) by Michael - 3/22/2006 1:19:00 AM
I am not school!! by Richard - 11/26/2002 4:57:00 PM
Re: I am not school!! by statusphere - 3/13/2006 4:06:00 AM
Age Of Empires 2 thru NAT by Rickado - 11/27/2002 6:03:00 AM
Re: Age Of Empires 2 thru NAT by Ricki - 3/6/2004 3:22:00 PM
Re: Age Of Empires 2 thru NAT by micx1 - 8/1/2005 8:37:00 AM
HLServer and dns2go headache by Jare - 12/20/2002 6:41:00 PM
DMZ and Port Forwarding by Jimmy Ng - 12/28/2002 12:29:00 AM
setting up smc7004abr on xp by red777 - 12/31/2002 3:17:00 AM
i have question by ryan - 1/2/2003 5:33:00 PM
port forwarding by Rick - 1/3/2003 10:12:00 AM
Re: port forwarding by Sam Adejo - 7/25/2005 6:38:00 AM
port forwarding programs by Niels Salien - 1/3/2003 6:53:00 PM
Re: port forwarding programs by ron - 5/26/2005 12:55:00 AM
modem by dave - 1/29/2003 1:22:00 AM
age of emipers2 by sander willems - 1/29/2003 2:20:00 PM
Re: age of emipers2 by Jawad - 5/5/2003 12:59:00 AM
Re: age of emipers2 by ruben - 9/18/2004 3:04:00 AM
web/mail server by jono - 2/12/2003 6:55:00 PM
Re: web/mail server by john - 3/5/2005 3:35:00 PM
Port Forwarding and Web Server by Larry - 2/19/2003 1:44:00 AM
Re: Port Forwarding and Web Server by jon - 5/12/2003 9:52:00 PM
Re: Port Forwarding and Web Server by Angelo - 6/18/2003 10:35:00 AM
Re: Port Forwarding and Web Server by Seb. - 1/16/2005 1:21:00 AM
Tribes2 server by eric - 2/20/2003 5:53:00 AM
Re: Tribes2 server by Amy J - 3/20/2003 7:13:00 PM
NAT or DMZ with Software Firewall by Richard - 3/1/2003 6:47:00 AM
ftp server port forwarding by Zwuido - 3/4/2003 4:31:00 AM
Port Forwarding Problem on XP by Mike - 3/31/2003 5:27:00 PM
Re: Port Forwarding Problem on XP by ken - 4/16/2003 11:17:00 AM
Re:Playing games simultaneosly from 2 machines on local N/W by Vedanarayanan - 4/2/2003 12:28:00 AM
cisoc 670 router port forwarding by subahar - 4/2/2003 6:31:00 AM
How can I port forward in windows XP ICS? by jeff - 4/8/2003 1:18:00 PM
Re: How can I port forward in windows XP ICS? by Henk - 4/19/2003 12:13:00 PM
Re: How can I port forward in windows XP ICS? by blib blab blob - 1/15/2005 2:14:00 PM
port forwarding with lan by Ricci Turner - 4/25/2003 6:34:00 PM
MIRC DCC SEND NOT WORKING by stormysoul - 4/28/2003 2:23:00 AM
Re: MIRC DCC SEND NOT WORKING by Lou - 5/9/2003 12:46:00 PM
ICS XP a Hotline in a Macintosh by Joel - 5/4/2003 6:29:00 AM
Re: ICS XP a Hotline in a Macintosh by Axello - 6/3/2003 5:52:00 PM
how do i open a port to play cossacks art of war by neyser - 5/19/2003 9:25:00 AM
my router is netgear router mr814 by neyser - 5/19/2003 9:30:00 AM
my router is netgear router mr814 by neyser - 5/19/2003 9:30:00 AM
Multi computers needing to Port Forward by Ren - 6/25/2003 4:53:00 PM
Setting limit on bandwidth for network game. by CTC Net - 6/26/2003 5:54:00 PM
Port forwarding (using USR router) by del - 7/21/2003 8:42:00 AM
Cable Router with Switch by Bruce - 8/8/2003 1:07:00 PM
Netgear MR314 Port Forwarding problem by ktoker - 8/15/2003 4:46:00 PM
Re: Netgear MR314 Port Forwarding problem by Dave - 1/3/2004 8:04:00 AM
Re: Netgear MR314 Port Forwarding problem by Ross - 4/24/2004 8:10:00 PM
Re: Netgear MR314 Port Forwarding problem by jamevay - 5/7/2004 12:38:00 PM
Re: Netgear MR314 Port Forwarding problem by jfdidier - 5/24/2004 3:30:00 PM
Re: Netgear MR314 Port Forwarding problem by Brad O - 6/14/2004 9:19:00 PM
Re: Netgear MR314 Port Forwarding problem by carpet69mc - 8/18/2006 7:12:00 AM
ICS, win 98se and hotline server by B99 - 8/17/2003 8:00:00 AM
Port Forwarding Help by Chris - 10/12/2003 8:45:00 AM
University firewall by bizarreD - 10/15/2003 10:18:00 PM
Planet Ade-4000 router Virtual Server by Welly - 11/16/2003 7:10:00 PM
Re: Planet Ade-4000 router Virtual Server by Maxime - 11/21/2003 1:08:00 PM
port forwarding by noob - 11/27/2003 10:06:00 AM
QTec 4 port router anf FTP by Paul - 12/10/2003 3:40:00 PM
Belkin 7630 VPN and SSL by Ross Rotheram - 12/22/2003 5:01:00 PM
Re: Belkin 7630 VPN and SSL by Sunil Sood - 4/22/2004 10:56:00 AM
Netgear MR314 IRC setting help! by Kenny - 1/4/2004 9:19:00 PM
2 computer behind a router by avim - 1/12/2004 6:06:00 AM
Re: 2 computer behind a router by Mike - 1/24/2004 10:08:00 PM
Help - VPN on MR814 by adf - 1/12/2004 4:48:00 PM
Help! Using DMZ for gaming? by rcnewbie - 3/6/2004 3:17:00 PM
Re: Help! Using DMZ for gaming? by STuNNa - 4/17/2004 4:24:00 PM
Apache Webserver by steve - 3/8/2004 3:34:00 AM
2 pc 's behind a belkin router by paullees - 3/19/2004 4:47:00 AM
Netgear Router and Port Forwarding by STuNNa - 4/17/2004 4:19:00 PM
Port Forwarding Conexant by David McCarthy - 4/19/2004 6:15:00 AM
Re: Port Forwarding Conexant by J. Gross - 6/4/2004 9:00:00 PM
hotline server by Adam Maclean - 4/29/2004 12:42:00 AM
HElp Please with Nat on Age by Gabriel Rodriguez - 6/29/2004 4:59:00 PM
DMZ by Sean - 7/1/2004 11:55:00 PM
Re: DMZ by jennifer - 8/30/2004 9:24:00 AM
Port forwarding and DHCP by Sjoerd - 7/19/2004 6:17:00 AM
Re: Port forwarding and DHCP by ScttyB - 7/29/2004 11:22:00 AM
ADSL with video server by jalal - 7/20/2004 7:05:00 AM
SMC7401BRA port forward by Francheska - 7/20/2004 9:14:00 AM
Re: SMC7401BRA port forward by nader - 8/4/2004 10:29:00 PM
how do u by ludacris - 8/4/2004 10:34:00 PM
IP or PORT forwarding best? by Imsai - 8/11/2004 12:13:00 PM
printserver by kalpana - 9/1/2004 9:06:00 PM
Netgear MR814v2 by Allan Young - 9/3/2004 4:02:00 AM
Gaming Ports by William - 9/14/2004 3:20:00 PM
Re: Gaming Ports by amazing - 9/22/2004 9:20:00 PM
port forwarding and bit torrent by JAZZY - 9/28/2004 5:38:00 PM
port forwarding by tazha - 9/28/2004 7:29:00 PM
port forwarding by Gobreath - 11/4/2004 8:04:00 PM
Port forwarding... by Jin150 - 11/6/2004 7:30:00 AM
anyone know how to port Addtron_ADR-e200p router? by michael - 11/8/2004 12:18:00 AM
Help With ADE 4000 of planet by Friend - 11/16/2004 11:25:00 AM
port forwarding by Kiewan - 12/18/2004 6:12:00 PM
my router hasn't got port forwarding??? by Baudy - 12/28/2004 12:33:00 PM
open ports to multiple ip's by Paul B - 2/17/2005 8:13:00 AM
help by paul - 2/20/2005 9:22:00 AM
port forwarding from web site by jorgen - 3/14/2005 6:49:00 AM
Re Websrever behind Connexant Modem Router by Tony Shergold - 4/1/2005 12:15:00 PM
Re: Re Websrever behind Connexant Modem Router by Filipe - 4/10/2005 4:57:00 AM
Help with AoEII and Router! by Krizen - 4/11/2005 5:53:00 PM
Re: Help with AoEII and Router! by David - 8/5/2006 10:33:00 PM
Teamspeak server behind a hub...forwarding needed? by Pamela - 5/13/2005 7:36:00 PM
DMZ (port forwarding) and NAT by Mikoman - 6/25/2005 3:11:00 AM
i want to host a game by meck - 7/23/2005 7:11:00 PM
Re: i want to host a game by brian - 8/2/2005 10:18:00 PM
ASUS Router WAN to LAN problem by Robert - 8/4/2005 11:25:00 AM
Not active on DC++ by Stefan - 8/9/2005 5:50:00 PM
Re: Not active on DC++ by SouthernBelle - 9/11/2005 6:35:00 AM
gaming help by Butch - 8/9/2005 8:46:00 PM
NAT slow down ISSUE by TractoR - 11/30/2005 3:29:00 AM
Problem regarding port forwading by azman - 12/27/2005 9:42:00 PM
VPN with NETGEAR fvs338 with SQL by stephentalla - 2/2/2006 3:45:00 AM
dmz by Captaincommander - 2/23/2006 9:11:00 AM
Access your NAS remotely with DNS by banditxgbn - 8/3/2006 11:39:00 PM
Re: Access your NAS remotely with DNS by Jason - 8/9/2006 2:00:00 PM
Need help confg DSL-504T by Mrugen - 8/24/2006 4:53:00 PM
broadband router by thomas - 9/15/2006 5:56:00 PM
Re: broadband router by mickal - 10/17/2006 1:58:00 PM
2 routers by Neha - 3/1/2007 2:21:00 PM
Posted by Neha
3/1/2007 2:21:00 PM.
2 routers
I have a router (Linksys) that is connected to the cable modem. That router also is connected to a switch. In one of the other rooms I have a router connected to an ethernet jack. That router is a DLINK. The wireless runs off of that router.

I need to open a port on linksys to my computer which is 192.168.0.101

Linksys settings seem to only allow 192.168.1.*. I can't figure out the ip of where I plugged the dlink router into the wall so that in the linksys I can open that port to the ip and then have that router forward the port to my computer.

does this make sense? I didn't do this before and I could download using utorrent. However, it seems to have stopped working and when I check the port it says its not forwarded.

Thanks,
Neha
2 routers by Neha - 3/1/2007 2:23:00 PM
Posted by Neha
3/1/2007 2:23:00 PM.
2 routers
I have a router (Linksys) that is connected to the cable modem. That router also is connected to a switch. In one of the other rooms I have a router connected to an ethernet jack. That router is a DLINK. The wireless runs off of that router.

I need to open a port on linksys to my computer which is 192.168.0.101

Linksys settings seem to only allow 192.168.1.*. I can't figure out the ip of where I plugged the dlink router into the wall so that in the linksys I can open that port to the ip and then have that router forward the port to my computer.

does this make sense? I didn't do this before and I could download using utorrent. However, it seems to have stopped working and when I check the port it says its not forwarded.

Thanks,
Neha
Re: 2 routers by jobren - 3/9/2007 1:35:00 PM
Posted by jobren
3/9/2007 1:35:00 PM.
Re: 2 routers
If I understand you correct, You have a Linksys with internal adresses of 192.168.1.1, the DLINK router will have address on the WAN/internet side in the same range eg. 192.168.1.10. Have a look at your DLINK router for this address. open the port in Linksys against the DLINK router address, and then open the port in DLINK against the PC at 192.168.0.101.

Need some online coupons and merchant discounts? Check CouponClock.com!

No Poll Today
 
HomeNetHelp: the home computer networking and Internet connection sharing resource
127 users on-line
aprox 0 users today
9/3/2010 6:58:14 PM
(c)2001 Anomaly, Inc
Site Index