NETGEAR RangeMax™ NEXT Wireless Router WNR834B User Manual
Customizing Your Network Settings 4-7
v2.1, July 2007
Disabling the SPI Firewall
The Stateful Packet Inspection (SPI) Firewall protects your network and computers against attacks
and intrusions. A stateful packet firewall carefully inspects incoming traffic packets, looking for
known exploits such as malformed, oversized, or out-of-sequence packets. The firewall should
only be disabled in special circumstances, such as when troubleshooting application issues.
Setting Up a Default DMZ Server
The default DMZ server feature is helpful when using some online games and videoconferencing
applications that are incompatible with Network Address Translation (NAT). The router is
programmed to recognize some of these applications and to work properly with them, but there are
other applications that may not function well. In some cases, one local computer can run the
application properly if that computer’s IP address is entered as the default DMZ server.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Port
Forwarding/Port Triggering menu. Instead of discarding this traffic, you can have it forwarded to
one computer on your network. This computer is called the Default DMZ Server.
The WAN Setup menu lets you configure a Default DMZ Server.
To assign a computer or server to be a Default DMZ server:
1. In the main menu, under Advanced, click WAN Setup.
2. Under Default DMZ Server, type the last digit of the IP address for that computer. To remove
the default DMZ server, enter zero.
3. Select the checkbox for Default DMZ Server and click Apply.
Responding to a Ping on the Internet WAN Port
If you want the router to respond to a 'ping' from the Internet, select the checkbox for Respond to
Ping on Internet WAN Port. This should only be used as a diagnostic tool, since it allows your
router to be discovered by Internet scanners. Do not select this checkbox unless you have a
specific reason to do so, such as when troubleshooting your connection.
Warning: DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall, and is exposed to exploits
from the Internet. If compromised, the DMZ server computer can be used to
attack other computers on your network.