Re: DLink DI-604 router firewall rule disables that config screen

From: Jason Tsang (jason-onlineDEL_at_ETEmvps.org)
Date: 03/10/04 

Date: Tue, 9 Mar 2004 23:05:54 -0500

Did you try upgrading the firmware of the router? It might contain a fix
for an issue like this. 

-- 
Jason Tsang - Microsoft MVP
Find out about the MS MVP Program -
http://mvp.support.microsoft.com/default.aspx
"*Vanguard*" <no-email@post-reply-in-newsgroup.invalid> wrote in message
news:IIGdnQxo0_ym5NDd4p2dnA@comcast.com...
> Didn't find a more appropriate newsgroup to post this.  I've got a DLink
> DI-604 NAT router.  This is in a home environment.  I'm not responsible
> nor want to manage the PCs used by other family members.  I just want to
> manage my PC.  As such, I wanted to isolate it on the router from the
> other hosts connected to it so I wouldn't have to be concerned about
> virus, trojans, or spyware installed on those other PCs.  I defined a
> rule in the router that isolates my host from any other host connected
> to that router but the side effect was that now I cannot edit or delete
> any of the firewall rules in the router (without having to reset the
> router and lose all of the configuration).
>
> The DLink router provides its own DHCP server used to assign the hosts
> connected to it with dynamically assigned IP addresses.  The range its
> DHCP server can assign IP addresses is 192.168.0.x, where x = 100 to
> 199.  The DLink DI-604 (after updating to its most recent firmware
> version) also allows assignment of static IP address assignment to hosts
> connected to it by their MAC address.  This allows firewall rules to be
> defined within the router for specific hosts without worrying that later
> they may get a different IP address.  Right now, mine is the only host
> assigned a static IP address of 192.168.0.100.  So the IP addresses
> currently used are:
>
> router = 192.168.0.1 (fixed)
> my PC = 192.168.0.100 (fixed)
> other PCs = 192.168.0.101-199 (dynamic)
>
> Normally I should be able to click on the edit icon to select it and
> display its settings in the edit fields where I can change them, or I
> can click on the delete icon to delete that rule, or click on the
> up/down arrows to change its position in the rules list.  However, after
> defining the following firewall rule in the router, the page for the
> firewall rules becomes unusable and I cannot edit, delete, or re-sort
> the rules.
>
> Mode = Enabled
> Name = "Isolate Lee's host" (my name is Lee, not the hostname)
> Source: LAN, IPaddr = 192.168.0.101 to 192.168.0.199, all ports
> Target: LAN, IPaddr = 192.168.0.100, TCP & UDP, all ports
> Access: Deny
> When active: Always
>
> My static IP address is x.x.x.100.  All other hosts will be x.x.x.101 to
> x.x.x.199 which covers the rest of the range for the router's DHCP
> server.  The router itself is at x.x.x.1 so it is NOT within the blocked
> IP address range.  So this firewall rule should prevent any host
> connected to the router (but not the router itself) from communicating
> to my host.  This is what I see occur on my intranetwork.  I can still
> open the browser to the router and perform all other configurations.
> It's just the firewall rules screen that locks up.
>
> So if I now or later want to add more rules, I have to record every
> customized setting in the router, reset the router, make the additional
> change plus restore all my other settings, and lastly define this
> firewall rule to isolate my host on that router from other hosts
> connected to that router.  A real pain.  I don't see that what I am
> defining in a firewall rule should disable just the firewall rules
> screen in the router.  I can still modify the settings in any other
> screen for the router.  Maybe another set of eyeballs might notice
> something stupid that I'm doing.  Or maybe its just some bug in the
> Dlink router (I'm still waiting for a response from Dlink).
>

Relevant Pages

  • Re: DLink DI-604 router firewall rule disables that config screen
    ... I've got a DLink ... I wanted to isolate it on the router from the ... > rule in the router that isolates my host from any other host connected ... > any of the firewall rules in the router (without having to reset the ...
    (microsoft.public.windowsxp.general)
  • Re: DLink DI-604 router firewall rule disables that config screen
    ... I defined a rule in the router that isolates my host from any ... >> assignment to hosts connected to it by their MAC address. ... >> allows firewall rules to be defined within the router for specific ... >> display its settings in the edit fields where I can change them, ...
    (microsoft.public.windowsxp.general)
  • Re: Help on firewall rules
    ... Now I can relax and enjoy my new cable connection! ... > address of the router into the browser address bar. ... I am stumped when it comes to setting the firewall rules! ...
    (microsoft.public.security)
  • Re: Windows is the better OS for running a FTP server
    ... and any router, NAT, and firewall rules in the network path. ... And the results of your examination of the router, ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
    (Debian-User)
  • DLink DI-604 router firewall rule disables that config screen
    ... I've got a DLink ... DI-604 NAT router. ... rule in the router that isolates my host from any other host connected ... any of the firewall rules in the router (without having to reset the ...
    (microsoft.public.windowsxp.general)