Like every other website on the planet, SmallNetBuilder uses cookies. Our cookies track login status, but we only allow admins to log in anyway, so those don't apply to you. Any other cookies you pick up during your visit come from advertisers, which we don't control.
If you continue to use the site, you agree to tolerate our use of cookies. Thank you!

Router Charts

Click for Router Charts

Router Ranker

Click for Router Ranker

NAS Charts

Click for NAS Charts

NAS Ranker

Click for NAS Ranker

More Tools

Click for More Tools

Wireless Reviews

Firewall

The 824 handles static port forwarding for single ports and port ranges chosen from a list of pre-defined services, or for custom user-defined services (Figure 4). Triggered ports are also supported for gaming and messaging applications, but a pick-list of applications isn't supplied to simplify setup. And, of course, a single DMZ machine is supported.

Note that NETGEAR said there is "no hard number" for the number of port forwarding or triggering rules or number of custom services that can be defined because of the way user entries are treated internal to the router. So I guess if you use a lot of forwarded ports, you could find yourself up against a limit.

NETGEAR WPN824 Port forwarding screen

Figure 4: Port Forwarding

UPnP is also supported and enabled by default. Although you can change the Advertisement Period and Time To Live, you can't disable NAT Traversal, which is used by UPnP-aware applications to automatically open ports in the 824's firewall. In a nod to security, NETGEAR has included a UPnP Portmap table, which is supposed to show connections opened by UPnP applications. But even when I launched Windows Messenger on a LAN-side machine, I couldn't get anything to appear in the table.

To control the services (ports) that LAN users can access, the 824 provides a Block Services function. Figure 5 shows you can schedule when services are blocked or have them always blocked and each service can be blocked for all, individual or a range of IP addresses.

NETGEAR WPN824 - Blocked services summary

Figure 5: Blocked Services summary

But if you choose scheduled blocking, you get only one schedule, which has only one time period that can be enabled for each day of the week. Figure 6 shows the screen for defining a custom service to block. You can choose UDP and TCP/UDP in addition to the TCP protocol shown.

NETGEAR WPN824 - Blocked service setup

Figure 6: Blocked service setup

You can exert finer control (than blocking all access with Block Services) over the websites and newsgroups that your users visit via the Block Sites feature. You can enter up to 255 keywords (these don't have to be complete domain names or even complete words) that will cause a "Web Site Blocked by NETGEAR Firewall" page

NETGEAR WPN824 - Block sites screen

Figure 7: Block sites screen
(click on image to enlarge)

It's nice that this feature is schedulable, and you also can enter one "Trusted" IP address that will get unfiltered Internet access. But, unfortunately, Block Sites isn't very smart, since it can be easily bypassed by entering the IP address of the desired site or news server.

More Wireless

Wi-Fi System Tools
Check out our Wi-Fi System Charts, Ranker and Finder!

Support Us!

If you like what we do and want to thank us, just buy something on Amazon. We'll get a small commission on anything you buy. Thanks!

Over In The Forums

1. Primary Router must be Merlin latest release. Download from the website. After flashing, Enable SSH in administration>system. Enable WAN+LAN option...
Is there any documentation for the CLI? I just finished resolving a problem with accessing the web based interface but would prefer the CLI, bash, its...
I'm pulling my hear out with this one. Hope someone can point me in the right direction. Luckily, I isolated the issue really well (had to bring equip...
Hello - long time lurker and user of Asuswrt-Merlin!Need a little help with getting the OpenVPN Server to behave as expected. Kinda new to using it. I...
I have a strange situation with my managed Netgear GS724Tv3 switch and/or Mikrotik RB3011 router. Everything seems to be running flawless and then at ...

Don't Miss These

  • 1
  • 2
  • 3