HotBrick Network Solutions

Special Applications

If you use Internet applications which have non-standard connections or port numbers, you may find

that they do not function correctly because they are blocked by the firewall in the Load Balancer. In

this case, you can define the application as a "Special Application" in order to make it work.

Note that the terms "Incoming" and "Outgoing" on this screen refer to traffic from the client (PC)

viewpoint

Figure 17 Special Applications

Settings – Special Applications

Select Special Application Name

Select Name Item

This lists any special applications, which are currently defined.

•

If adding a new Special Application, ignore this list.

Just enter your data in the

Special Application Configuration

section, and click the "Add" button.

•

To edit an existing entry, select it from this list, and click the "Select"

button. The data for the selected application will then be displayed

in the

Special Application Configuration

section.

Make any required changes, and then click the "Update" button.

Special Application Configuration

32

HotBrick Network Solutions

Enable

Use this to Enable or Disable this Special Application as required.

Name

Enter a descriptive name to identify this Special Application.

Outgoing Protocol

Select the protocol used by this application, when sending data to the

remote server or PC.

Outgoing Port Range

Enter the beginning and end of the range of port numbers used by the

application server, for data you send. If the application uses a single

port number, enter it in both fields.

Incoming Protocol

Select the protocol used by this application, when receiving data from

the remote server or PC.

Incoming Port Range

Enter the beginning and end of the range of port numbers used by the

application server, for data you receive. If the application uses a single

port number, enter it in both fields.

Buttons

•

Add

– Create a new Special Application entry.

•

Delete

– Delete the selected entry.

•

Update

– Save any changes you have made to the current entry.

•

Cancel

– Cancel any changes you have made since the last save

operation.

Special Application

List

This shows details of all Special Applications which are currently

defined.

Using a Special Application on your PC

•

Once the

Special Applications

screen is configured correctly, you can use the application on your

PC normally. Remember that only one (1) PC can use each Special application at any time.

•

Also, when 1 PC is finished using a particular Special Application, there may need to be a "Time-

out" period before another PC can use the same Special Application.

•

If an application still cannot function correctly, try using the "DMZ" feature, if possible.

33

HotBrick Network Solutions

Dynamic DNS

Dynamic DNS is very useful when combined with the

Virtual Server

feature. It allows Internet users to

connect to your Virtual Servers using a URL, rather than an IP Address.

This also solves the problem of having a dynamic IP address. With a dynamic IP address, your IP

address may change whenever you connect to your ISP, which makes it difficult to connect to you.

You must register for the Dynamic DNS service. The Load Balancer supports 2 types of service

providers:

•

Standard client, available at http://www.dyndns.org

Other sites may offer the same service, but can not be guaranteed to work.

•

TZO at

•

3322 is available in China at http://www.3322.org

To use the Dynamic DNS feature

1.

Register for the service from your preferred service provider.

2.

Follow the service provider's procedure to have a Domain Name (Host name) allocated to you.

3. Configure the

Dynamic DNS

screen, as described below.

4.

The Load Balancer will then automatically update your IP Address recorded by the Dynamic DNS

service provider.

5.

From the Internet, users will now be able to connect to your Virtual Servers (or DMZ PC) using

your Domain name.

Figure 18 Dynamic DNS

34

HotBrick Network Solutions

Settings – Dynamic DNS

Dynamic DNS

Service

Use this to Enable/Disable the Dynamic DNS feature, and select the required

service provider.

•

Disable

– Dynamic DNS is not used.

•

TZO

– Select this to use the TZO service (www.tzo.com). You must configure

the

TZO

section of this screen.

•

Standard Client

– Select this to use the standard service (from

www.dyndns.org or other provider). You must configure the

Standard Client

section of this screen.

•

3322(in China)

– This is available in China. It is similar to “Standard client”

WAN Port

Binding

•

Select the WAN port on which the Dynamic DNS is used.

•

The "Force Update" button will update your record on the Dynamic DNS

Server immediately.

TZO Custom

Dynamic DNS

Service

If you have registered for this service, complete these fields.

•

Key

– Enter your Key, as recorded on the TZO Web site.

•

E-mail

– Enter your E-mail address, as recorded on the TZO Web site.

•

Domain

– Enter the domain name allocated to you by TZO.

Standard

Client or 3322

If you have registered for this service, complete these fields.

•

User Name

– Enter the user name recorded by the service provider.

•

Password

– Enter the password recorded by the service provider.

•

Verity Password

– Re-enter the password above.

•

Server

– Enter the name or IP address of the service provider's Server.

•

Host Name

- Enter the domain name allocated to you by the service provider.

Additional

Standard

Client or 3322

Settings

These options are available if using the standard client.

•

Enable Wildcard

– If selected, traffic sent to sub-domains (of your Domain

name) will also be forwarded to you.

•

Enable backup MX

– If enabled, you must enter the

Mail Exchanger

address

below.

•

Mail Exchanger

– If the setting above is enabled, enter the address of the

backup Mail Exchanger.

35

HotBrick Network Solutions

Multi DMZ

This feature allows each WAN port IP address to be associated with one (1) computer on your LAN.

All outgoing traffic from that PC will be associated with that WAN port IP address. Any traffic sent to

that IP address will be forwarded to the specified PC, allowing unrestricted 2-way communication

between the "DMZ PC" and other Internet users or Servers.

Note:

The "DMZ PC" is effectively outside the Firewall, making it more vulnerable to attacks. For this

reason, you should only enable the DMZ feature when required

Figure 19 Multi DMZ

36