Chapter 6
Advanced Features

Communication Applications
Select an Application	This lists applications which may generate incoming connections, where the destination PC (on your local LAN) is unknown.
Send incoming calls to	This lists the PCs on your LAN. If necessary, you can add PCs manually, using the "PC Database" option on the advanced menu. For each application listed above, you can choose a destination PC. There is no need to "Save" after each change; you can set the destination PC for each application, then click "Save".

Checkbox	Use this to Enable or Disable this Special Application as required.
Name	Enter a descriptive name to identify this Special Application.
Incoming Ports	Type - Select the protocol (TCP or UDP) used when you receive data from the special application or service. (Note: Some applications use different protocols for outgoing and incoming data). Start - Enter the beginning of the range of port numbers used by the application server, for data you receive. If the application uses a single port number, enter it in both the "Start" and "Finish" fields. Finish - Enter the end of the range of port numbers used by the application server, for data you receive.
Outgoing Ports	Type - Select the protocol (TCP or UDP) used when you send data to the remote system or service. Start - Enter the beginning of the range of port numbers used by the application server, for data you send to it. If the application uses a single port number, enter it in both the "Start" and "Finish" fields. Finish - Enter the end of the range of port numbers used by the application server, for data you send to it. If the application uses a single port number, enter it in both the "Start" and "Finish" fields.

If an application still cannot function correctly, try using the "DMZ" feature.

The "DMZ PC" is effectively outside the Firewall, making it more vulnerable to attacks. For this reason, you should only enable the DMZ feature when required.

Filter Strings
Current Entries	This lists any existing entries. If you have not entered any values, this list will be empty.
Add Filter String	To add an entry to the list, enter it here, and click the "Add" button. An entry may be a Domain name (e.g. www.trash.com) or simply a string. (e.g. ads/ ) Any URL which contains ANY entry ANYWHERE in the URL will be blocked.
Buttons
Delete/Delete All	Use these buttons to delete the selected entry or all entries, as required. Multiple entries can be selected by holding down the CTRL key while selecting.(On the Macintosh, hold the SHIFT key while selecting.)
Add	Use this to add the current Filter String to the site list.

Restrictions are imposed by blocking "Services", or types of connections. All common Services are pre-defined. If required, you can also define your own Services.

Group
Group	Select the desired Group. The screen will update to display the settings for the selected Group. Groups are named "Default", "Group 1", "Group 2", "Group 3" and "Group 4", and cannot be re-named.
"Members" Button	Click this button to add or remove members from the current Group. If the current group is "Default", then members can not be added or deleted. This group contains PCs not allocated to any other group. To remove PCs from the Default Group, assign them to another Group. To assign PCs to the Default Group, delete them from the Group they are currently in. See the following section for details of the Group Members screen.
Internet Access
Restrictions	Select the desired options for the current group: None - Nothing is blocked. Use this to create the least restrictive group. Block all Internet access - All traffic via the WAN port is blocked. Use this to create the most restrictive group. Block selected Services - You can select which Services are to block. Use this to gain fine control over the Internet access for a group.
Block by Schedule	If Internet access is being blocked, you can choose to apply the blocking only during scheduled times. (If access is not blocked, no Scheduling is possible, and this setting has no effect.)
Define Schedule Button	Clicking this will open a sub-window where you can define or modify the Schedule.
Services	This lists all defined Services. Select the Services you wish to block. To select multiple services, hold the CTRL key while selecting. (On the Macintosh, hold the SHIFT key rather than CTRL.)
Edit Service List Button	If you wish to define additional Services, or manage the Service list, click this button to open the "Services" screen.
Buttons
Members	Click this button to add or remove members from the current Group. If the current group is "Default", then members can not be added or deleted. This group contains PCs not allocated to any other group. See the following section for details of the Group Members screen.
Define Schedule	Click this to open a sub-window where you can define or modify the Schedule.
Edit Service List	If you wish to define additional Services, or manage the Service list, click this button to open the "Services" screen.
Save	Save the data on screen.
Cancel	Reverse any changes made since the last "Save".
View Log	Click this to open a sub-window where you can view the "Access Control" log. This log shows attempted Internet accesses which have been blocked by the Access Control feature.
Clear Log	Click this to clear and restart the "Access Control" log, making new entries easier to read.

PCs not assigned to any group will be in the "Default" group. PCs deleted from any other Group will be added to the "Default" group.

Day	Each day of the week can scheduled independently.
Session 1 Session 2	Two (2) separate sessions or periods can be defined. Session 2 can be left blank if not required.
Start Time	Enter the start using a 24 hr clock.
Finish Time	Enter the finish time using a 24 hr clock.

Available Services
Available Services	This lists all the available services.
"Delete" button	Use this to delete any Service you have added. Pre-defined Services can not be deleted.
Add New Service
Name	Enter a descriptive name to identify this service.
Type	Select the protocol (TCP, UDP, ICMP) used to the remote system or service.
Start Port	For TCP and UDP Services, enter the beginning of the range of port numbers used by the service. If the service uses a single port number, enter it in both the "Start" and "Finish" fields.
Finish Port	For TCP and UDP Services, enter the end of the range of port numbers used by the service. If the service uses a single port number, enter it in both the "Start" and "Finish" fields.
ICMP Type	For ICMP Services, enter the type number of the required service.
Buttons
Delete	Delete the selected service from the list.
Save	Add a new entry to the Service list, using the data shown in the "Add New Service" area on screen.
Cancel	Clear the " Add New Service " area, ready for entering data for a new Service.

Date/Time	Date and Time of the attempted access.
Name	If known, the name of the PC whose access was blocked. This name is taken from the Network Clients database
Source IP address	The IP Address of the PC or device whose access request was blocked
MAC address	The hardware or physical address of the PC or device whose access request was blocked
Destination	The destination URL or IP address

Remote Management
Enable Remote Management	Enable to allow management via the Internet. If Disabled, this device will ignore management connection attempts from the Internet.
Port Number	Enter a port number between 1024 and 65535 (8080 is recommended). This port number must be specified when you connect (see below). Note: The default port number for HTTP (Web) connections is port 80, but using port 80 here will prevent the use of a Web "Virtual Server" on your LAN. (See Advanced Internet - Virtual Servers)
Current IP Address	You must use this IP Address to connect (see below). This IP Address is allocated by your ISP. But if using a Dynamic IP Address, this value can change each time you connect to your ISP. So it is better if your ISP allocates you a Fixed IP Address.

Servers
Servers	This lists a number of pre-defined Servers, plus any Servers you have defined. Details of the selected Server are shown in the "Properties" area.
Properties
Enable	Use this to Enable or Disable support for this Server, as required. If Enabled, any incoming connections will be forwarded to the selected PC. If Disabled, any incoming connection attempts will be blocked.
PC (Server)	Select the PC for this Server. The PC must be running the appropriate Server software.
Protocol	Select the protocol (TCP or UDP) used by the Server.
Internal Port No.	Enter the port number which the Server software is configured to use.
External Port No.	The port number used by Internet users when connecting to the Server. This is normally the same as the Internal Port Number. If it is different, this device will perform a "mapping" or "translation" function, allowing the server to use one port address, while clients use a different port address.
Buttons
Defaults	This will delete any Servers you have defined, and set the pre-defined Servers to use their default port numbers.
Disable All	This will cause the "Enable" setting of all Virtual Servers to be set OFF.
Add as New Server	Add a new entry to the Virtual Server list, using the data shown in the "Properties" area on screen. The entry selected in the list is ignored, and has no effect.
Update Selected Server	Update the current Virtual Server entry, using the data shown in the "Properties" area on screen.
Delete	Delete the current Virtual Server entry. Note that the pre-defined Servers can not be deleted. Only Servers you have defined yourself can be deleted.
Clear Form	Clear all data from the "Properties" area, ready for input of a new Virtual Server entry.

For each entry, the PC must be running the appropriate Server software.

Create a new Server:	Click "Clear Form" Enter the required data, as described above. Click "Add". The new Server will now appear in the list.
Modify (Edit) a Server:	Select the desired Server from the list Make any desired changes (for example, change the Enable/Disable setting). Click "Update" to save changes to the selected Server.
Delete a Server:	Select the entry from the list. Click "Delete". Note: You can only delete Servers you have defined. Pre-defined Server cannot be deleted.

From the Internet, ALL Virtual Servers have the IP Address allocated by your ISP.

DDNS Service
DDNS Service	You must sign up first to create a new account before using the service. The service is free. Click this link to connect to the www.dyndns.org Web site. Your initial password will be E-mailed to you; you can change this later if you wish. After registration, use the "Create New Host" link (on the www.dyndns.org Web site) to request a domain name.
DDNS Data
User Name	Enter the "User name" specified at the www.dyndns.org Web site when you registered.
Password	Enter your current password for www.dyndns.org
Domain Name	Enter your domain name, as allocated at www.dyndns.org. The name should consist only of letters and the hyphen (dash). Using any other characters may cause problems..
DDNS Status	This message is returned by the DDNS Server at www.dyndns.org Normally, this message should be "Update successful" (current IP address was updated on the www.dyndns.org server). If the message is "No host", this indicates the host name entered was not allocated to you. You need to connect to www.dyndns.org and correct this problem.

The Broadband Router is unavailable during the upgrade process, and must restart when the upgrade is completed. Any connections to or through the Broadband Router will be lost.