Firewalls in Routers

MBHockey · 01-11-2004, 02:26 AM

Is there any way to effectively "turn off" the firewall that is in my airport extreme base station? I notice that exchanging files with iChat goes much smoother if i disconnect from AirPort and reconnect with just my ethernet cord. Not just iChat, p2p apps seem to be affected by this also.

I never understood much about port forwarding, or port opening (?) to make these things work correctly.

Thanks,
Mike

mclbruce · 01-11-2004, 04:11 AM

Using Port Mapping or Default host may help out here. The following is from the help files in the Airport Admin Utility:

If you want to play network games, you can set up a computer on your AirPort network as the default host. This computer will be exposed to the Internet and receive all inbound traffic.

To set up a computer as a default host:

1. Open AirPort Admin Utility, located in Applications/Utilities.

2. Select your base station from the list and click Configure.

3. Click Show All Settings.

4. Click WAN Privacy, then select the Enable Default Host checkbox.

The default IP address is 10.0.1.253. Assign this address to the host computer. (Open the Network pane of System Preferences, choose AirPort from the Show pop-up menu, and choose Manually from the Configure pop-up menu.)

Me again, there is more on port mapping. Of you just want to send the iChat traffic directly to your computer that should help as well. It's not as drastic as the default host option.

MBHockey · 01-11-2004, 12:00 PM

Ok i did all that, however i ran into a little snitch.

I cannot access web pages, or seemingly go on the internet at all, even though it says i am connected via pppoe thru AirPort.

I know i followed all the steps correctly, is there anything else i need to know? As it stands i can't use AirPort :-(

MBHockey · 01-11-2004, 12:19 PM

I switched to regular ethernet, restarted, switched back to new AirPort settings, restarted, and it magically works now.

Can't explain it.

But thanks, all is going well as i am posting with my new AirPort settings. :-)

MBHockey · 01-11-2004, 05:09 PM

Now it isn't working. It works with the DHCP settings and the Default Host disabled it will work, but if i enable the Default Host and change my network settings for TCP/IP to manual for my computer and put in the same IP as the default host, it won't work. It connects to my Home network, but it can't connect to the internet.

The odd thing is, my computer thinks it is connected to the internet. If i go to my network prefpane and hit network status, it's a green bubble and says it is both connected to my Home network AND connected to the internet via PPPoE. But i can't log in to AIM or go on the internet...

I am a networking newbie.

It was working before, can anyone help me out on this?

OS 10.3.2
AirPort Extreme from DSL modem

mclbruce · 01-11-2004, 05:33 PM

You're almost there, just a little tuning shoud do it...

I think the problem is in your network settings, probably your DNS servers. Here's a couple of things to try in your Network preferences.

1. Set your connect method to "using DHCP with manual IP address." Put in the IP address for default host and leave everything else blank.

If this works, you're done. If not try:

2. Set your connection to "Manually." When you do this, you must specify the router address, which is the address of the base station, probably 10.0.1.1.

You must also specify addresses for the DNS servers. You can get the DNS servers from the Airport Admin Utility, or just use the 10.0.1.1 address of the Base Station in the DNS Servers area and that should work.

MBHockey · 01-11-2004, 09:01 PM

Hmm, i tried both, they didn't work.

I have included some screenshots in this zip file, please take a look if you have a minute mclbruce, because i can't figure out why it's not working just how the AirPort help file says to do it.

No! Why can't we add attachments? :-(

my email address is dmb41@verizon.net, maybe i could email you this zip file?

MBHockey · 01-11-2004, 09:37 PM

This is really weird. When i was trying to get it to work on the Default Host mode i could ping all these websites...yahoo.com, google.com, and nhl.com

But my browswer can not load them. Also, when my browser tries to load any site it hangs forever, but if i disconnect from airport physically, i immediately get a message that the site cannot be found.

mclbruce · 01-11-2004, 11:06 PM

This still sounds like a Domain Name Server issue. Try looking up the IP address of a web site like yahoo.com in Network Utility. Type the IP in your web browser and see if that works.

MBHockey · 01-12-2004, 09:54 AM

I can ping yahoo.com and google.com, however when i type it the ip in my browser it cannot load the website.

also, when i pinged www.macosxhints.com i didn't get a response, but yahoo and google both sent data back.

What else could the DNS server be? Besides the Router address?

I see that you MUST fill it in, because when you switched to DHCP it says optional next to the box, but on Manual you must specify the DHCP server.

yellow · 01-12-2004, 11:30 AM

I know next to nothing about PPoE and an ABS, but some thoughts on the subject are:

Ping is a different type of network packet then web traffic. Ping is an ICMP packet which might not be being blocked by the ABS. If TCP port 80 IS being blocked (or not forwarded properly, I suppose) by the ABS, it would easily account for being able to ping but not being able to surf. Can't you totally reset the ABS somehow and get it back to factory settings? It might be good to start from scratch again and see what the deal is right from the get-go.

MBHockey · 01-12-2004, 11:38 AM

Yes, i have hard reset the base station twice.

The thing i don't understand is that it worked at one point for a few minutes, then i restarted and nothing worked. I'm hoping it's just a problem with AirPort Extreme and will be fixed in a future update of the OS or a new firmware release.

Also, I don't know what to put in the DNS box. I have verizon DSL and i don't know how i would find what should be put there.

mclbruce · 01-12-2004, 11:52 AM

Quote:


	Originally posted by MBHockey Also, I don't know what to put in the DNS box. I have verizon DSL and i don't know how i would find what should be put there.

Your ABS it using Verizon's Domain Name Servers to look up domain names. Verison's domain name servers can be found in several ways. In the WAN or summary section of the airport admin utilities it should say what DNS addresses the Airport Base Station is using.

MBHockey · 01-12-2004, 11:58 AM

In the airport admin utility, in the summary tab it says:

Public (WAN) IP Address: 68.161.25.118

But if i go to the show all settings tab, then Internet it lists all my PPPoE settings but then on the bottom next to DNS Servers both boxes are empty, as is the one below it for Domain Name.

mclbruce · 01-12-2004, 02:07 PM

Try these:

199.45.32.41
199.45.32.40

This is what I came up with by looking up your IP address in network utility.

MBHockey · 01-12-2004, 05:52 PM

I entered those both in the network prefpane in my system preferences, they didn't work. then i added them to the DNS Server boxes in the AirPort admin utility. But it's not working. I appreciate all your help mclbruce.

Has anyone gotten this to work?

MBHockey · 01-15-2004, 12:50 AM

http://discussions.info.apple.com/We...nn.6@.599f2f08

Seems noone has gotten it to work, and are just awaiting a newer firmware upgrade.

mclbruce · 01-15-2004, 03:58 PM

Thanks for the followup report on this MBHockey. That's valuable, although unwelcome, information.

MBHockey · 01-16-2004, 07:24 PM

I decided to purchase a Netgear wireless router (MR814v2) and i couldn't possibly be happier. It seemlessly integrated itself into Airport in the MenuBar without any installtion of software, i was able to set my computer as the default host (although NetGear calls it DMZ server, but is is the same thing, all incoming traffic, all ports open) and what's more is that my powerbook gets MUCH BETTER range with this router than the AEBS (in the part of my house where i lost my signal to the AEBS, i get 3 bars in the MenuBar with this router)

It cost me $70, AEBS cost me $250. I'm going to sell the AEBS on eBay. :-)

01-11-2004, 02:26 AM	#1
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Firewalls in Routers Is there any way to effectively "turn off" the firewall that is in my airport extreme base station? I notice that exchanging files with iChat goes much smoother if i disconnect from AirPort and reconnect with just my ethernet cord. Not just iChat, p2p apps seem to be affected by this also. I never understood much about port forwarding, or port opening (?) to make these things work correctly. Thanks, Mike

01-11-2004, 12:19 PM	#4
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Update I switched to regular ethernet, restarted, switched back to new AirPort settings, restarted, and it magically works now. Can't explain it. But thanks, all is going well as i am posting with my new AirPort settings. :-)

01-11-2004, 05:09 PM	#5
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	No! Now it isn't working. It works with the DHCP settings and the Default Host disabled it will work, but if i enable the Default Host and change my network settings for TCP/IP to manual for my computer and put in the same IP as the default host, it won't work. It connects to my Home network, but it can't connect to the internet. The odd thing is, my computer thinks it is connected to the internet. If i go to my network prefpane and hit network status, it's a green bubble and says it is both connected to my Home network AND connected to the internet via PPPoE. But i can't log in to AIM or go on the internet... I am a networking newbie. It was working before, can anyone help me out on this? OS 10.3.2 AirPort Extreme from DSL modem

01-15-2004, 12:50 AM	#17
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Interesting... http://discussions.info.apple.com/We...nn.6@.599f2f08 Seems noone has gotten it to work, and are just awaiting a newer firmware upgrade.

01-16-2004, 07:24 PM	#19
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Yet another update... I decided to purchase a Netgear wireless router (MR814v2) and i couldn't possibly be happier. It seemlessly integrated itself into Airport in the MenuBar without any installtion of software, i was able to set my computer as the default host (although NetGear calls it DMZ server, but is is the same thing, all incoming traffic, all ports open) and what's more is that my powerbook gets MUCH BETTER range with this router than the AEBS (in the part of my house where i lost my signal to the AEBS, i get 3 bars in the MenuBar with this router) It cost me $70, AEBS cost me $250. I'm going to sell the AEBS on eBay. :-)

01-11-2004, 04:11 AM	#2
mclbruce Hall of Famer Join Date: Mar 2002 Posts: 3,878	Using Port Mapping or Default host may help out here. The following is from the help files in the Airport Admin Utility: If you want to play network games, you can set up a computer on your AirPort network as the default host. This computer will be exposed to the Internet and receive all inbound traffic. To set up a computer as a default host: 1. Open AirPort Admin Utility, located in Applications/Utilities. 2. Select your base station from the list and click Configure. 3. Click Show All Settings. 4. Click WAN Privacy, then select the Enable Default Host checkbox. The default IP address is 10.0.1.253. Assign this address to the host computer. (Open the Network pane of System Preferences, choose AirPort from the Show pop-up menu, and choose Manually from the Configure pop-up menu.) Me again, there is more on port mapping. Of you just want to send the iChat traffic directly to your computer that should help as well. It's not as drastic as the default host option.

01-11-2004, 12:00 PM	#3
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Ok i did all that, however i ran into a little snitch. I cannot access web pages, or seemingly go on the internet at all, even though it says i am connected via pppoe thru AirPort. I know i followed all the steps correctly, is there anything else i need to know? As it stands i can't use AirPort :-(

01-11-2004, 05:33 PM	#6
mclbruce Hall of Famer Join Date: Mar 2002 Posts: 3,878	You're almost there, just a little tuning shoud do it... I think the problem is in your network settings, probably your DNS servers. Here's a couple of things to try in your Network preferences. 1. Set your connect method to "using DHCP with manual IP address." Put in the IP address for default host and leave everything else blank. If this works, you're done. If not try: 2. Set your connection to "Manually." When you do this, you must specify the router address, which is the address of the base station, probably 10.0.1.1. You must also specify addresses for the DNS servers. You can get the DNS servers from the Airport Admin Utility, or just use the 10.0.1.1 address of the Base Station in the DNS Servers area and that should work.

01-11-2004, 09:01 PM	#7
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Hmm, i tried both, they didn't work. I have included some screenshots in this zip file, please take a look if you have a minute mclbruce, because i can't figure out why it's not working just how the AirPort help file says to do it. No! Why can't we add attachments? :-( my email address is dmb41@verizon.net, maybe i could email you this zip file?

01-11-2004, 09:37 PM	#8
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	This is really weird. When i was trying to get it to work on the Default Host mode i could ping all these websites...yahoo.com, google.com, and nhl.com But my browswer can not load them. Also, when my browser tries to load any site it hangs forever, but if i disconnect from airport physically, i immediately get a message that the site cannot be found.

01-11-2004, 11:06 PM	#9
mclbruce Hall of Famer Join Date: Mar 2002 Posts: 3,878	This still sounds like a Domain Name Server issue. Try looking up the IP address of a web site like yahoo.com in Network Utility. Type the IP in your web browser and see if that works.

01-12-2004, 09:54 AM	#10
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	I can ping yahoo.com and google.com, however when i type it the ip in my browser it cannot load the website. also, when i pinged www.macosxhints.com i didn't get a response, but yahoo and google both sent data back. What else could the DNS server be? Besides the Router address? I see that you MUST fill it in, because when you switched to DHCP it says optional next to the box, but on Manual you must specify the DHCP server.

01-12-2004, 11:30 AM	#11
yellow Moderator Join Date: Jan 2002 Posts: 10,677	I know next to nothing about PPoE and an ABS, but some thoughts on the subject are: Ping is a different type of network packet then web traffic. Ping is an ICMP packet which might not be being blocked by the ABS. If TCP port 80 IS being blocked (or not forwarded properly, I suppose) by the ABS, it would easily account for being able to ping but not being able to surf. Can't you totally reset the ABS somehow and get it back to factory settings? It might be good to start from scratch again and see what the deal is right from the get-go.

01-12-2004, 11:38 AM	#12
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	Yes, i have hard reset the base station twice. The thing i don't understand is that it worked at one point for a few minutes, then i restarted and nothing worked. I'm hoping it's just a problem with AirPort Extreme and will be fixed in a future update of the OS or a new firmware release. Also, I don't know what to put in the DNS box. I have verizon DSL and i don't know how i would find what should be put there.

01-12-2004, 11:58 AM	#14
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	In the airport admin utility, in the summary tab it says: Public (WAN) IP Address: 68.161.25.118 But if i go to the show all settings tab, then Internet it lists all my PPPoE settings but then on the bottom next to DNS Servers both boxes are empty, as is the one below it for Domain Name.

01-12-2004, 02:07 PM	#15
mclbruce Hall of Famer Join Date: Mar 2002 Posts: 3,878	Try these: 199.45.32.41 199.45.32.40 This is what I came up with by looking up your IP address in network utility.

01-12-2004, 05:52 PM	#16
MBHockey MVP Join Date: Sep 2003 Location: New York Posts: 2,211	I entered those both in the network prefpane in my system preferences, they didn't work. then i added them to the DNS Server boxes in the AirPort admin utility. But it's not working. I appreciate all your help mclbruce. Has anyone gotten this to work?

01-15-2004, 03:58 PM	#18
mclbruce Hall of Famer Join Date: Mar 2002 Posts: 3,878	Thanks for the followup report on this MBHockey. That's valuable, although unwelcome, information.