RP614v2 ports and IPs

dinkie_2

Hi

I followed portforward's security instructions re setting a static address and portforwarding, and sorted the settings in ZoneAlarm Pro and in the router's own setup. Everything's working fine, no errors reported, and presumed had secured the system better/got router properly configured now.

Just noticed ipconfig shows that the IP address I've set as the static one, and portforwarded on, is the Default Gateway's address. The IP address reported in ipconfig a couple of lines above is very close to the Default Gateway's address. Both addresses are now supported via ZoneAlarm.

Portforward had said to use IP/router address, which I did, in ZoneAlarm allowances etc too, but ipconfig has the IP address I used as being the Default Gateway rather than the IP address two lines above. Confused as to why both the Default Gateway and the IP address a couple of lines above aren't the same.

Have also got two Tunnel setting thingies in ipconfig too, after installing extra things from the XP disk. Not sure if I need these or not, if they're settings for physically connected computers, and if they mean more ports are open than need be. But don't know which corresponds with the programs I added in/which to remove. Installed them incase I'd got anything wrong and they turned out to be needed.

Many thanks, Cat

dinkie_2

Hi again

Am getting ZoneAlarm message when first into computer saying remote connection lost, and also router log reports .........

<SPI: non-existing connection> <TCP>
<SPI: TCP packet error>

Am unsure if these are errors coming up because the computer isn't physically connected to other computers, and all I need to do is uninstall any extra programs that didn't really need to install from the XP disk. Don't know which ones are relevant ones. Unsure what the 'remote connection lost' error is about. No problems with mail and getting online. But am worried incase the ZoneAlarm message means system is insecure.

Just noticed also that ipconfig shows something is broadcasting and now IP routing and WINS proxy are enabled. This wasn't so earlier today, and I've not configured anything differently. Worried about the broadcasting bit. Does this mean system is insecure, or is it that I've set up a network on a single machine that is meant for physically connected machines?

Would really appreciate advice.
Many thanks, Cat

dinkie_2

No problem now. Have gone back over the things changed and uninstalled them etc, surfed and found had to remove ip6 something. Ipconfig shows things back to normal.

Cat

albertross_2

why are you setting up port forwarding, do you have an application that needs it?

dinkie_2

Hi

I thought I had to set up a static address and sort out the ports, for stability of router connection and for general security. No idea about configuring routers properly and what extra security configurations are needed, plus didn't want to leave it just automatically set up by Windows, as read a lot of posts saying e.g. the Windows firewall isn't great, so I thought maybe the automatic router setting might not be up to much either, and just tried anything that sounded relevant. I read that a static IP address connection is less likely to drop, and the information about making the IP address static, on Portforwarding, also said to portforward, in the RP614v2 section.

And have been having problems with ntl connection, before and after the router being attached - they're upgrading/doing maintenance, and am sick of connection dropping at least once every day, so thought making a static IP address etc would help that. Don't think it has, as last night connection dropped altogether, but I know it's not the router, as this was all happening before the router was attached, and on ntl's site the ongoing maintenance information is forever showing up at the moment! Other than that, system's running fine, so am relieved must have setup static IP correctly!

Cat

albertross_2

I could be talking BS, so please take with a pinch of salt.. But you shouldn't need to setup port forwarding unless you have an application that needs it (a game for example), and it could break the inherent security given by your NAT firewall..

The major plus of a router, is that it hides your PC, behind the router, so the outside world can't see your PC, unless you ask it to, and the router passes on any traffic to your local ip address of 192.168.0.x.

I don't use NTL, or play online games, so maybe someone else can advise on what is required.. the defaults on a router are usually ok unless you have an application that needs to talk to the outside world directly.

If you dont use any of these, you probably don't need portforwarding, and the router defaults are more secure:

http://www.portforward.com/cports.htm

dinkie_2

It was more the static IP address that I was interested to try, regarding helping with the ntl problems at the moment, but, yes, am wanting to learn how to setup playing PS2 online, so am glad that by accident I've managed to already set up the system for that! Will change settings until sort out the PS2 side of things though, as don't want to have the system insecure :eek: Many thanks for information.

albertross_2

If you are talking about a local static IP address (192.x.x.x), then I doubt that it will make any difference to your connection problems, that's down to your ISP. If you are talking about an external static IP, then as far as I'm aware, you can't change that, either NTL give you a static IP address, or a dynamic one, it isn't affected by router configuration.

I'd try a portscan at https://www.grc.com/x/ne.dll?bh0bkyd2

or

https://www.dslreports.com/tools, to check what you have opened up..

dinkie_2

hi

Thanks for the links. All fine/hitting the router address instead of mine, except for the open port I forwarded, so will sort that out. I didn't try to change a static address, but changed the ntl dynamic to static. Hoping ntl maintenance etc stops soon!

Cat