How to setup Inbound/Outbound firewall

How to setup Inbound/Outbound firewall rules on NETGEAR Modem router/gateways

Symptoms: 

• Cannot connect or access LAN devices or applications from the Internet (i.e.: FTP server, HTTP server, Podcast server, etc...)
• Cannot play online games through NETGEAR Modem Routers
• The NETGEAR firewall prevented certain applications to work correctly over the Internet

Resolutions:

By default, the NETGEAR Firewall rules will block and prevent any unauthorized access to your Local Area Network (LAN).  Remote access to the LAN devices or applications will only be possible after an inbound or outbound firewall rule is added to the router/gateway.  Inbound firewall rules are set of rules that would allow or permit access to the LAN services from the Internet -- the default rule blocks all incoming service requests.  On the other hand, Outbound firewall rules would prevent or deny access to the Internet from the LAN devices -- the default rule allows all outgoing traffic. 

The steps below will show you how to configure inbound/outbound firewall rules:

1. Open Internet browser and access http://192.168.0.1 or http://www.routerlogin.com.  

2. Enter admin for username and password for password. If you have changed the default password, please enter your customized password when prompted.

3. On the left panel under Security (Content Filtering, for older devices) , click Firewall Rules. 

4. Click the Add button under the type of rule (Outbound or Inbound) that you would like to add.

5. Select the desired Service from the list.  If necessary, you can define a customized service.  To add a new customized Service, follow these steps:

1. 1. On the left panel, under Security (Content Filtering for older models), click Services.
   2. Click the Add Custom Service button.
   3. Create a Name for the new service
   4. Select the Type of protocol that the service will be using.
   5. Enter the Starting port and Ending port
   6. Click Apply to finish adding the new custom service.

6. Under Action, select the appropriate action for packets covered for this rule.

• Note: To define the Schedule used in these selections, use the "Schedule" option listed on the Security or Content Filteringsection.

7. Under the Send to LAN server field, enter the IP address of the PC or Server on your LAN which will receive the inbound or outbound traffic covered by this rule.

8. Select an option for WAN Users. This setting determine which packets are covered by the rule, based on their source (WAN) IP address. Here are the options:

1. • Any - All IP addresses are covered by this rule
   • Address range - If this option is selected, you must enter the "Start" and "Finish" fields
   • Single address - Enter the required address in the "Start" fields.

9. Select an option under Log. This determines whether packets covered by this rule are logged. Select the desired action.

1. • Always - always log traffic considered by this rule, whether it matches or not. (This is useful when debugging your rules.)
   • Never - never log traffic considered by this rule, whether it matches or not.
   • Match - Log traffic only it matches this rule. (The action is determined by this rule.)
   • Not Match - Log traffic which is considered by this rule, but does not match (The action is NOT determined by this rule.)

10. Click on Apply button.

This applies to:
     > Netgear MBR624GU, DGND3300, DGN2000, DG834G and DG834N.