Frequently Asked Questions

 
Q:
My firewall/Router has port forwarding to build web server (port 80), can I still use MS-1000?
A:

No. The reason is that with same external IP the port forwarding can only assign each port a server, which won’t allow two or more servers.  MS-1000 uses port 80 of web server, so if your firewall/router has dominated web server (port 80) for other application, then MS-1000 won’t be able to use it with object router/firewall.

MS-1000 Sign Server

Example given as above, when router (24.2.249.4) received http request, it will forward to web server (10.0.0.3), upon receipt ftp will forward to ftp server(10.0.0.2), through router’s port forwarding, user can use LAN from this router to build http (web) server and ftp servers.

Suggestions :  MS-1000 has to have a dedicated IP (Shown as following),  MS-1000 includes firewall/router features, which will open the necessary port  as needed.  It's not like PC server which has to use firewall for protection all the time.

MS-1000 Sign Server

Related information:
 
Ports: Applications running on TCP/IP open connections to other computers using something called ports. Ports allow multiple applications to reside on a single computer - all talking TCP/IP. Ports are another set of numbers AFTER the standard IP address. Applications often hide these port numbers to reduce the complexity of TCP/IP. Example: web services (HTTP) reside on port 80 by default. To reach this web site, you could type http://www.homenethelp.com:80 into your browser. The 80 is the default port number for the HTTP protocol so typing it is not necessary. There are 65535 available ports.

Port Forwarding: A broadband router or other NAT application creates a firewall between your internal network and the internet. A firewall keeps unwanted traffic from the internet away from your LAN computers.  A ‘tunnel’ can be created through your firewall so that the computers on the Internet can communicate to one of the computers on your LAN on a single port. This is handy for running web servers, game servers, ftp servers, or even video conferencing. This is called port forwarding. One of your computers could run a web server (port 80) while another computer could run an FTP server (port 23) - both on the same IP address.

DMZ: This is a feature that is included on some routers but is not in Internet sharing software. A DMZ allows a single computer on your LAN to expose ALL of its ports to the Internet. When doing this, the exposed computer is no longer ‘behind’ the firewall.

Port Forwarding vs DMZ
A DMZ is far easier to set up than port forwarding but exposes your entire computer to the Internet. Sometimes TCP/IP applications require very specialized IP configurations that are difficult to set up or are not supported by your router. In this case, placing your computer in the DMZ is the only way to get the application working. Placing a computer in the DMZ should be considered ‘temporary’ because your firewall is no longer able to provide any security to it.

Port forwarding can sometimes be difficult to configure, but provides a relatively safe way of running a server from behind a firewall. Since only a single port (or small series of ports) is exposed to the Internet, the computer is easier to secure. Additionally, port forwarding allows you to run multiple kinds of servers from different computers on your LAN. 

 
 
Copyright 2006 CornDigtal | Privacy Policy | Site Map | Home