NETGEAR RangeMax™ Wireless-N Gigabit Router WNR3500v2 User Manual

Protecting Your Network

3-5

v1.0, May 2009

•

If the keyword

.com

is specified, only websites with other domain suffixes (such as .edu, .org,

or .gov) can be viewed.

To block access to Internet sites:

1.

Select

Block Sites

under Content Filtering in the main menu. The Block Sites screen displays.

2.

Enable keyword blocking by selecting either

Per Schedule

or

Always

.

To block by schedule, be sure to specify a time period in the Schedule screen. For information

about scheduling, see

“Scheduling Blocking” on page 3-8

.

Block all access to Internet browsing during a scheduled period by entering a dot (

.

) as the

keyword, and then set a schedule in the Schedule screen.

3.

Add a keyword or domain by entering it in the keyword field and clicking

Add Keyword

. The

keyword or domain name then appears the

Block sites containing these keywords or domain

names

list.

Delete a keyword or domain name by selecting it from the list and clicking

Delete Keyword

.

4.

You can specify one trusted user, which is a computer that is exempt from blocking and

logging. Specify a trusted user by entering that computer’s IP address in the

Trusted IP

Address

fields.

Since the trusted user is identified by IP address, you should configure that computer with a

fixed IP address.

Figure 3-5

NETGEAR RangeMax™ Wireless-N Gigabit Router WNR3500v2 User Manual

3-6

Protecting Your Network

v1.0, May 2009

5.

Click

Apply

to save all your settings in the Block Sites screen.

Blocking Access to Internet Services

The WNR3500v2 router allows you to block the use of certain Internet services by computers on

your network. This is called service blocking or port filtering. Services are functions performed by

server computers at the request of client computers. For example, Web servers serve Web pages,

time servers serve time and date information, and game hosts serve data about other players’

moves. When a computer on your network sends a request for service to a server computer on the

Internet, the requested service is identified by a service or port number. This number appears as the

destination port number in the transmitted IP packets. For example, a packet that is sent with

destination port number 80 is an HTTP (Web server) request.

To block access to Internet services:

1.

Select

Block Services

under Content Filtering in the main menu. The Block Services screen

displays.

2.

Enable service blocking by selecting either

Per Schedule

or

Always

, and then click

Apply

.

To block by schedule, be sure to specify a time period in the Schedule screen. For information

about scheduling, see

“Scheduling Blocking” on page 3-8

.

Figure 3-6

NETGEAR RangeMax™ Wireless-N Gigabit Router WNR3500v2 User Manual

Protecting Your Network

3-7

v1.0, May 2009

3.

Specify a service for blocking by clicking

Add

. The Block Services Setup screen displays.

4.

From the

Service Type

list, select the application or service to be allowed or blocked. The list

already displays several common services, but you are not limited to these choices. To add any

additional services or applications that do not already appear, select

User Defined

.

5.

Select the radio button for the IP address configuration you want to block, and then enter the

IP addresses in the appropriate fields.

You can block the specified service for a single computer, a range of computers (having

consecutive IP addresses), or all computers on your network.

6.

Click

Add

to enable your Block Services Setup selections.

Configuring a User-Defined Service

To define a service, first you must determine which port number or range of numbers is used by

the application. The service port numbers for many common protocols are defined by the Internet

Engineering Task Force (IETF) and published in RFC1700, “Assigned Numbers.” Service

numbers for other applications are typically chosen from the range 1024 to 65535 by the authors of

the application. You can often determine port number information by contacting the publisher of

the application, by asking user groups or newsgroups, or by searching.

•

Enter the starting port and ending port numbers. If the application uses a single port number,

enter that number in both fields.

•

If you know that the application uses either TCP or UDP, select the appropriate protocol. If

you are not sure, select

Both

.

Figure 3-7

NETGEAR RangeMax™ Wireless-N Gigabit Router WNR3500v2 User Manual

3-8

Protecting Your Network

v1.0, May 2009

Scheduling Blocking

The WNR3500v2 router allows you to specify when blocking is enforced.

To schedule blocking:

1.

Select

Schedule

under Content Filtering in the main menu. The Schedule screen displays.

2.

Configure the schedule for blocking keywords and services.

a.

Days to Block

. Select days on which you want to apply blocking by selecting the

appropriate check boxes. Select

Every Day

to select the check boxes for all days. Click

Apply

.

b.

Time of Day to Block

. Select a start and end time in 24-hour format. Select

All Day

for

24-hour blocking. Click

Apply

.

Be sure to select your time zone in the E-mail screen as described in

“Setting the Time” on

page 3-11

.

3.

Click

Apply

to save your settings.

Figure 3-8

NETGEAR RangeMax™ Wireless-N Gigabit Router WNR3500v2 User Manual

Protecting Your Network

3-9

v1.0, May 2009

Viewing Logs of Web Access or Attempted Web Access

The log is a detailed record of the websites you have accessed or attempted to access. Up to

128 entries are stored in the log.

Select

Logs

under Content Filtering in the main menu. The Logs screen displays.

Table 3-1

describes the log entries.

To refresh the log screen, click the

Refresh

button.

To clear the log entries, click the

Clear Log

button.

To e-mail the log immediately, click the

Send Log

button.

Figure 3-9

Table 3-1.

Log Entry Descriptions

Field

Description

Date and time

The date and time the log entry was recorded.

Source IP

The IP address of the initiating device for this log entry.

Target address

The name or IP address of the website or newsgroup

visited or to which access was attempted.

Action

Whether the access was blocked or allowed.