• February 23, 2025, 03:41:24 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: access control questions  (Read 3526 times)

tallyho

  • Level 1 Member
  • *
  • Posts: 2
access control questions
« on: April 01, 2012, 10:41:24 PM »

Hi,

I have a 825 and have setup access control so it doesn't allow my mac mini which i use as a media server to access the internet.

Does this make the mini more secure from hacks or am i just wasting my time doing this?  The reason i ask is i want to set up Crashplan on the machine to constantly backup so need internet access.

Crashplan says its needs TCP port 4242 to be open.  How can i block all access except this port ?


Thanks



Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: access control questions
« Reply #1 on: April 02, 2012, 06:56:17 AM »

Access Control is just that, doen't allow any access in or out from the LAN side, depending on how it's set up.

Only thing you need is to make sure the SPI firewall settings are enabled and you can set NAT to Endpoint Independent.

Just open up a port using Application rules is all you need.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

tallyho

  • Level 1 Member
  • *
  • Posts: 2
Re: access control questions
« Reply #2 on: April 02, 2012, 11:22:12 PM »

so application rules will override the access control ?

Sorry if this is an obvious question but I'm not that familiar with firewalls.

Also, at present my firewall is set to UDP endpoint restricted and TCP port and addressed restricted.  is endpoint independence less secure ?


Thanks
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: access control questions
« Reply #3 on: April 03, 2012, 07:03:48 AM »

No, application rules=port forwarding.

Endpoint Independent has same secure level, just operates and is more compatible with some application layers.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.