I have one networked lighting processor that is being jammed by an overflow of bots trying to access is on my network. My router is an Apple Time Capsule and it does seem to have a setting for port mapping but I don't want to turn off ALL port mapping/forwarding to all devices/processors on my network, only to that one. I'd be most grateful for any help on this.
Thanks
Fred
Airport Time Capsule-OTHER, 3T
Your port forwarding rules are totally in your hands.. you should have a set of rules to port forward to the IP of the light controller.. you will have to delete that set of rules from the TC.. there is no cute/smart way to do it.
You can however preserve your current settings before you change things.. just use the export configuration in the top menu before you start.
OK, thanks, that helps get me started. I have this processor set up in TC as IPv4 Port Mapping with Private IP address and public and private UDP and TCP ports. I assume you mean for me to delete this processor setup and I can do that. But then how do I have to set it anew so it will still work locally on the network but not use port forwarding/mapping and thus outside Internet access? I've tried to + add it as an IPv6 Firewall setup but I haven't been able to put in the right info for the Save Button to not be grayed out.
I cannot help you with the IPv6 stuff.. sorry but I live in an internet backwater.
As far as local network is concerned no ports are opened..
so it will still work locally on the network
Nothing is needed. Port forwarding is a side effect of NAT router blocking public IP to local IP. It is only needed to get across a NAT. In the local network all ports are available to all clients.
I thought I was pretty good with most things but this stuff has me baffled and proved that I'm still a neophyte.
So do I understand that I could just delete this processor from the network setup entirely and, because it is connected via ethernet it will still be accessible locally but not from the outside? Thanks again. I really appreciate your help
So do I understand that I could just delete this processor from the network setup entirely and, because it is connected via ethernet it will still be accessible locally but not from the outside?
Correct. It would work on a wireless connection as well, if that makes any difference.
Yes, that was my assumption. Thanks Bob, I'll try it now.
It might be a good idea to keep a static IP address assigned to the device, if only to know that the device will always get the same IP address on the network.
Now that I've deleted it from the Network setup, how can I set it up again to have the static IP address?
Use AirPort Utility to set up a DHCP Reservation. Look for the DHCP Reservation box just above the Port Mapping settings box.
Click on the + button to set up the reservation.....which is the same as static IP address.
Thanks so much Bob. You have helped me previously on several issues and I really appreciate your help and straightforward answers.
Is there a way to turn off port mapping/forwarding to one device on my network?
