Scribd Logo
Upload

Welcome to Scribd!

  • 35 views

    Port Forwarding: Motivation

    Uploaded by

    Darko Milovanović
    The document discusses port forwarding which allows external clients to connect to internal web servers on a local network by forwarding specific ports on the router to ports on the web servers. Port forwarding can be configured to forward individual ports or a range of ports from the router to hosts on the local network. The document also mentions configuring a DMZ to forward all unspecified ports to a single host and the use of UPnP to dynamically open ports, which poses security risks.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    Port Forwarding: Motivation

    Uploaded by

    Darko Milovanović
    35 views3 pages
    The document discusses port forwarding which allows external clients to connect to internal web servers on a local network by forwarding specific ports on the router to ports on the web servers. Port forwarding can be configured to forward individual ports or a range of ports from the router to hosts on the local network. The document also mentions configuring a DMZ to forward all unspecified ports to a single host and the use of UPnP to dynamically open ports, which poses security risks.

    Original Description:

    Port Forwarding

    Original Title

    Port Forwarding

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses port forwarding which allows external clients to connect to internal web servers on a local network by forwarding specific ports on the router to ports on the web servers. Port forwarding can be configured to forward individual ports or a range of ports from the router to hosts on the local network. The document also mentions configuring a DMZ to forward all unspecified ports to a single host and the use of UPnP to dynamically open ports, which poses security risks.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    35 views3 pages

    Port Forwarding: Motivation

    Uploaded by

    Darko Milovanović
    The document discusses port forwarding which allows external clients to connect to internal web servers on a local network by forwarding specific ports on the router to ports on the web servers. Port forwarding can be configured to forward individual ports or a range of ports from the router to hosts on the local network. The document also mentions configuring a DMZ to forward all unspecified ports to a single host and the use of UPnP to dynamically open ports, which poses security risks.

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 3

    Port Forwarding

    Motivation

    Suppose you have a local network, and you have two web servers on the network, Web Server 1 on
    192.168.1.10 and Web Server 2 on 192.168.1.20. Suppose you also want an external client to be
    able to connect to either of these servers.
    Only one IP is associated with the network, the external IP of the router: 1.2.3.4 in the schematic
    above. In order for a client to be able to communicate with both web servers, we can forward a port
    on the router to port 80 on Web Server 1 and forward a different port on the router to port 80 Web
    Server 2. So, we might forward port 8001 on the router to Port 80 on Web Server 1 and 8002 on the
    router to Port 80 on Web Server 2. This way, the external client could connect to Web Server 1 at
    http://1.2.3.4:8001/ and Web Server 2 at http://1.2.3.4:8002/
    Individual Port Forwarding

    These options let you forward a single port from the router to a host on the local network. The
    options are:
     Description: A description of this forward. This is just a label for the rule, it doesn't affect
    how the forward functions, and is optional.
     Protocol: Whether to forward TCP packets, UDP packets or Both.
     From Port: The external port (on the WAN interface of the router) to forward to the host on
    the local network.
     To IP: The IP address of the host on the local network to which you want to forward the port
     To Port: The port on the local host to which you are forwarding traffic. If unspecified, this
    is assumed to be the same as the From Port

    Port Range Forwarding


    These options let you forward a range of ports to a single local host. The source port range and the
    destination port range are the same.
    The options are:
     Description: A description of this forward. This is just a label for the rule, it doesn't affect
    how the forward functions, and is optional.
     Protocol: Whether to forward TCP packets, UDP packets or Both.
     Start Port: The first (lowest) port in the port range being forwarded
     End Port: The last (highest) port in the port range being forwarded
     To IP: The IP address of the host on the local network to which you want to forward this
    range of ports
    DMZ

    When a DMZ (De-Militarized Zone) is configured, all ports not specifically used by the router or
    forwarded to other hosts are forwarded to one specific host on the local network. This can include a
    lot of hostile traffic, so only activate this option if this host has a firewall configured.

    UPnP / NAT-PMP

    UPnP is a protocol that allows hosts to dynamically open and forward ports. Since this can pose a
    security risk, it is disabled by default. However, some applications require UPnP. Think carefully
    before enabling UPnP.

    You might also like