Forum Discussion

Aspirant

Nov 19, 2019

Limit port forwarding to whitelisted IP Addresses

I am looking for a modem/router product recommendation please. I owned a really basic Netgear DG834G modem a few years ago which had a neat Port Forwarding feature which would only port forward f...

JimByron

Aspirant

Nov 21, 2019

Whilst I thank you for your quick reply, you actually didnt answer the question. I know the BR500 has both IPSEC VPN and Port Forwarding because it says so on the sales page, but nothing in that page or the manual you sent indicates whether the port forwarding rule can be enabled ONLY FOR CERTAIN EXTERNAL IP ADDRESSES.. That's the dilemma - I want a router that only forwards traffic that comes from a whitelist of external IP Addresses. Can you confirm this is possible on the BR500?

DaneA

NETGEAR Employee Retired

Nov 21, 2019

JimByron,

As I understand your concern, you wanted to create a port forwarding rule to secondary WAN IP addresses, am I right? If yes, I regret to inform you that this is not possible on the BR500.

Regards,

DaneA

NETGEAR Community Team

JimByron
Aspirant
Nov 21, 2019
No, I dont think you understood. I want to create a port forwarding rule which only works for a list of external IP addresses. In other words, if a user at an address with a "trusted" IP address tries to access the server using remote desktop port 3389, they will be forwarded to the server, but if someone at any other IP address tried, the forward will fail
- schumaku
  Guru - Experienced User
  Nov 21, 2019
  You ask for the ability to configure firewall rules e.g for WAN -> LAN allowing a defined set of IPv4 (and probably IPv6) addresses to these ports (and protocol) on the port forwarded LAN IP. Not a very difficult question, indeed.
  
  Seriously, I don't know - we have given up the BR500. However I'm keen to learn if this is possible now using the BR500 Web UI and then again using the Insight Pro control.
  
  Indeed, older Netgear consumer routers had this capability, but today's Netgear consumer routers (not talking of the BR500 here) lack of this feature, too. Complained many times - Netgear does not give a ****. - they think some crappy firewall rules for LAN->Internet are more important. They simply don't understand networking.