NETGEAR WGT624 Reference Manual page 69

The WAN setup options are explained below:
• Disable SPI Firewall.
Normally, this option should be enabled, so that your local network will be protected by the
stateful packet inspection (SPI) firewall included in the wireless router. However, certain
communications functions like VPN may require turning off the SPI feature.
Note: When SPI firewall is disabled, you must use the Passive mode in the computer
FTP client to connect to the FTP server.
• Default DMZ Server.
The default DMZ server feature is helpful when you use some online games and
videoconferencing applications that are incompatible with NAT. The router is programmed to
recognize some of these applications and to work properly with them, but there are other
applications that may not function well. In some cases, one local computer can run the
application properly if that computer's IP address is entered as the default DMZ server.
Note: DMZ servers pose a security risk. A computer designated as the default DMZ
server loses much of the protection of the firewall, and is exposed to exploits
from the Internet. If compromised, the DMZ server can be used to attack your
network.
Incoming traffic from the Internet is normally discarded by the router unless the traffic is a
response to one of your local computers or a service that you have configured in the Ports
menu. Instead of discarding this traffic, you can have it forwarded to one computer on your
network. This computer is called the default DMZ server.
• NAT Filtering.
This determines how your router handles inbound traffic. The Secured option provides a
secure firewall to protect the computers on the LAN from attacks from the Internet, but it may
cause some Internet games, point-to-point applications, or multimedia applications not to
work. The Open option provides less protection, but allows almost all Internet applications to
work.
• Assigning a Default DMZ Server. See
Advanced Configuration
108 Mbps Wireless Router WGT624 v4 Reference Manual
"Assigning a Default DMZ Server" on page
v1.2, July 2007
5-8.
5-7