Manage the Firewall and Secure Your Network

61

AC1900, N900, and N450 WiFi

Cable Data Gateways

The keyword or domain is removed from the blocked list.

8.

Click the

Apply

button.

Your settings are saved.

Remove All Keywords and Domains from the Blocked List

You can simultaneously remove all keywords and domains from the blocked list.



To remove all keywords and domains from the blocked list:

1.

On your computer, launch an Internet browser such as Mozilla Firefox or Microsoft

Internet Explorer.

2.

In the address field of your browser, enter

http://routerlogin.net

.

You are prompted to enter a user name and password.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home screen displays.

5.

Select

ADVANCED > Security >

Block Sites

.

The Block Sites screen displays.

6.

Click the

Clear List

button.

All keywords and domains are removed from the blocked list.

7.

Click the

Apply

button.

Your settings are saved.

Specify a Trusted Computer

You can exempt one trusted device from blocking and logging. The device that you exempt

must be assigned a fixed (static) IP address.



To specify a trusted device:

1.

On your computer, launch an Internet browser such as Mozilla Firefox or Microsoft

Internet Explorer.

2.

In the address field of your browser, enter

http://routerlogin.net

.

You are prompted to enter a user name and password.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

Manage the Firewall and Secure Your Network

62

AC1900, N900, and N450 WiFi

Cable Data Gateways

The BASIC Home screen displays.

5.

Select

ADVANCED > Security >

Block Sites

.

The Block Sites screen displays.

6.

Scroll down and select the

Allow trusted IP address to visit blocked sites

check box.

7.

In the

Trusted IP Address

field, enter the IP address of the trusted device.

The first three octets of the IP address are automatically populated and depend on the IP

address that is assigned to the cable data gateway on the LAN Setup screen.

8.

Click the

Apply

button.

Your settings are saved.

Block Access to Services and Applications

Services are functions that servers perform at the request of client devices. For example,

web servers serve web pages, time servers serve time and date information, and game hosts

serve data about the moves of the players.

When a device on the Internet sends a request for service to a server, the requested service

is identified by a service or port number. (For this reason, service blocking is also referred to

as port filtering.) The service or port number appears as the destination port number in the

transmitted IP packets. For example, a packet that is sent with the destination port number 80

is an HTTP (web server) request.

The service numbers for many common protocols are defined by the Internet Engineering

Task Force (IETF at

) and published in

RFC1700, Assigned Numbers

.

Service numbers for other applications are typically chosen from the range 1024–65535 by

Manage the Firewall and Secure Your Network

63

AC1900, N900, and N450 WiFi

Cable Data Gateways

the authors of the application. Although the cable data gateway already holds a list of many

service port numbers, you are not limited to these choices.

You can block access to specific Internet services by devices on your network. This feature is

called service blocking or port filtering. The cable data gateway provides default (predefined)

services that you can select to block. You can also add a new service for blocking, but you

first must find out which port number or range of numbers the application uses. You can find

port number information by contacting the publisher of the application, by asking user groups

or newsgroups, or by searching the Internet.

Block a Default Service

You can set up blocking of specific services to occur continuously or according to a schedule.



To block a default service:

1.

On your computer, launch an Internet browser such as Mozilla Firefox or Microsoft

Internet Explorer.

2.

In the address field of your browser, enter

http://routerlogin.net

.

You are prompted to enter a user name and password.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home screen displays.

5.

Select

ADVANCED > Security > Block Services

.

The Block Services screen displays.

Manage the Firewall and Secure Your Network

64

AC1900, N900, and N450 WiFi

Cable Data Gateways

6.

Specify a keyword blocking option:

•

Per Schedule

. Use service blocking according to a schedule that you set.

For more information, see

Schedule When Features Are Active

on page

68.

•

Always

. Use service blocking continuously.

7.

Click the

Add

button.

The Block Services Setup screen displays.

8.

From the

Service Type

menu, select the default application or service to block.

The menu displays several common services, but you are not limited to these choices.

For information about how to add any additional services or applications, see

Add and

Block a Custom Service

on page

65.

9.

Under Filter Services For, select an IP address configuration:

•

Only This IP Address

. Complete the IP address for the device for which the

application or service must be blocked.

•

IP Address Range

. Complete the IP address range for the devices for which the

application or service must be blocked.

•

All IP Addresses

. The application or service is blocked for all IP addresses on your

network.

10.

Click the

Add

button.

Your changes are saved in the table on the Block Services screen. However, if you restart

the cable data gateway, the changes are lost. You also must apply the changes on the

Block Services screen.

11.

On the Block Services screen, click the

Apply

button.

Manage the Firewall and Secure Your Network

65

AC1900, N900, and N450 WiFi

Cable Data Gateways

Your settings are saved.

Add and Block a Custom Service

If the service that you want to block is not on the default service list, you can define a custom

service.



To add and block a custom service:

1.

On your computer, launch an Internet browser such as Mozilla Firefox or Microsoft

Internet Explorer.

2.

In the address field of your browser, enter

http://routerlogin.net

.

You are prompted to enter a user name and password.

3.

Type

admin

for the user name and type your password.

If you did not yet personalize your password, type

password

for the password.

4.

Click the

OK

button.

The BASIC Home screen displays.

5.

Select

ADVANCED > Security > Block Services

.

The Block Services screen displays.

6.

Specify a keyword blocking option:

•

Per Schedule

. Use service blocking according to a schedule that you set.

For more information, see

Schedule When Features Are Active

on page

68.

•

Always

. Use service blocking continuously.