Setting up DMZ / Removing firewall

Question

Setting up DMZ / Removing firewall

Before I buy an Airport Extreme Base Station, 3 questions:

Is it possible to set up DMZ's (De-militarized zones, a feature that allows you to disable the firewall for certain IP addresses)

Can you set more than one DMZ?

Can you just turn the firewall off entirely?

I ask because a firewall, to me, is more of a hinderance than a help. I play alot of games (Mac and PS2), and it's too much of a pain in the * to work on port forwarding for every single port. Basically, there are two possible courses of action I want to take:

1. Disable the hardware firewall completely, using a software firewall for the only computer that I don't game on.

or, if that's not possible:

2. Setting up 3 DMZ's for the 3 devices that need full access.

Thanks!

1 Ghz Gigabit EN G4, iBook 466 Clamshell, Mac OS X (10.4.4)

Posted on Jan 23, 2006 12:28 PM

Reply

Answer 1

Duane

Level 10

124,293 points

Jan 24, 2006 7:29 AM in response to Chris Schowalter

Is it possible to set up DMZ's (De-militarized zones, a feature that allows you to disable the firewall for certain IP addresses)

Yes, but it is referred to as "Default Host" in the AirPort documents.

Can you set more than one DMZ?

No

Can you just turn the firewall off entirely?

The operation of NAT when the option to "distribute IP addresses" provides a firewall. So if you disable the option to "distribute IP addresses" in AirPort Extreme base station (AEBS) you will disable this firewall.

2. Setting up 3 DMZ's for the 3 devices that need full access.

Please note that with the option to "distribute IP addresses" disabled you will need 3 static IP addresses from your ISP.

Reply

Answer 2

Jan 25, 2006 6:13 PM in response to Duane

Hmm, if I'll need to buy additional IP addresses, I guess that's not an option.

As part of the setup will feature my iBook doing Internet Connection Sharing with my PS2 (wireless access from iBook routed into PS2), will they both show up as a single device in the router, or will they be considered two seperate devices. If they're both considered a single device, I could DMZ the iBook, and kill 2/3 birds with one stone. Then I could just change the DMZ so it's applied on my desktop when I need to use all its ports.

Reply

Answer 3

iGreg

Level 2

382 points

Apr 18, 2006 9:15 AM in response to Duane

I found the simple instructions to set Default Host in Airport Extreme Help. Followed the instructions. Then lost my internet connection.

Contacted Apple online chat support fo iMac. They told me there is no firewall in Airport Extreme. I laughed at the support guy. I disconnected from the chat support.

Reply

Answer 4

iGreg

Level 2

382 points

Apr 18, 2006 10:31 AM in response to Duane

Yes, I know that, but I wanted them to help me disable the "consequence" but instead they talk to me like a lawyer, picking apart the English language.

Been on my cell phone to Apple for over an hour and accomplished nothing but use up my cell phone minutes.

Because of the mediocrity of Apple support, I always contact them last. Going to them is a last resort since I get most answers from forums here or MacFixit or my personal research. I only got to Apple when all else fails. Unfortunately, going to Apple is almost always a dead end with no resolution.

Message was edited by: iGreg

Reply

Answer 5

iGreg

Level 2

382 points

Apr 18, 2006 10:40 AM in response to iGreg

Now I am on the warpath. Now they tell me the only place to get help in setting Default Host is the discussion boards and articles.

I have no choice now but to start my war planning on making Apple supports life miserable. Hundreds of dollars not only for Airport Extreme, but hundreds more for AppleCare for PowerBook and iMac G5, and they won't help me set Default Host on one of my machines? They won't help me disable the firewall features on their router?! I never had this problem with other brand routers, disabling their firewalls (DMZ) was usually one of the easiest things you could do.

Reply