AirPort Extreme Gig - No Firewall???

Just read in a PC mag review that the AirPort Base Station doesn't have a firewall built into it?
My documentation shows that it does - can I correctly assume that they don't know what they're talking about?
Mark

When you configure the AirPort Extreme base station (AEBS) to distribute IP addresses, the combination of DHCP and NAT acts as a firewall. So yes it has a firewall but it isn't an industrial firewall.

Similar Messages

AIRPORT EXTREME to PS2, FIrewall

I got my PS2 to go online thru my Airport extreme but it says I that the firewall port (3653?) needs to be opened to join etc.
On the SHARING portion of the Network set up, I have allowed FTP Access as well as having checked BUILT IN Ethernet
Should i add anything to the DNS Servers box?
(my world domination of Burnout Revenge is about to begin as soon as I can get thru the firewall)

1) Find out the IP address of your AEBS (First page of your Airport utility).
2) Now we can allocate an IP address for your PS2. Substitude the last number with 201, and we'll make your PS2 at xxx.xxx.xxx.201. Don't use this IP for anything else.
3) The IP address on PS2/3 is normally assigned automatically, and we want to change it to manual.
4) Assuming the AEBS is on 10.0.1.1, then enter the follow setting on your PS2:
IP = 10.0.1.201
Subnet mask = 255.255.255.0
Gateway = 10.0.1.1 (AEBS's ip address)
DNS = 10.0.1.1 (I think it's optional)
5) Now open your AirPort Utility and goto Advanced > Port Mapping
6) Add a new rule
7) Set both public and private UDP port to 3658, if you have older AEBS, the older BS's don't seperate UDP and TCP, so just set private and public to 3658.
8) Set private address to 10.0.1.201 (address of your PS2) and click continue
9) That's it.
Here is the definition of type 2 and type 3 NAT from SONY:
http://manuals.playstation.net/document/en/ps3/current/settings/connecttest.html
For type 3 NAT you might be missing out the voice / video chat and online game play, direct communication with other PS3™ systems.
Message was edited by: dchao99

Airport Extreme (GIG-E)

I just bought an Airport Extreme in preparation for my iMac. I'm having a few problems.
1) Whenever the Airport utility checks for updates, in spite of there being no tick box available anymore for the AE-G (I'm at 7.2.1), it says there is, thinking the non gig-e edition is my update.
2) It seems when I'm noodling around in settings and close out without saving anything (hence the AE-G rebooting) I still lose connection for some time (like it's rebooting).
I'm running Windows XP SP2 and the latest Airport utility and firmware (per the apple updater)
Message was edited by: Mindflux

That's not the answer I wanted.
FWIW I still get dropouts where my connection dies and I have to reconnect.
To top it off my girlfriends wired computer that is hooked directly to the AEBSn cannot connect to the Air Disk, but the wireless(mine) can.

How do I configure my Airport Extreme firewall?

I seem to remeber configuring a firewall on my Airpot Extreme/Time Capsule when I first set it up. How do I get into it again to check the configuration settings - The Airport Utility does seem to provide a way in.

There is no "firewall configuration" on the AirPort Extreme. It provides a NAT firewall but this automatically closes all ports apart from the ones you choose to open.

Airport Extreme and 500 Gig drive

I have 27 MacBook's in a mobile lab connected to a brand new Airport Extreme. The Airport Extreme serves up a 500 Gig drive that (during my tests) I can connect to flawlessly.
My laptops all have the user, "Student." In the dock on the Student account, I have a folder that is located on the AP Extreme hard drive that I want my students to access.
During my instruction to the students, I had them all click the folder in their docks so they could see the contents of said folder. There's only 6 sub folders, so it's not like a heavy load showing previews or anything.
20 computers connected to the disk successfully (there's no password to see the contents) and 7 didn't. The 7 that didn't asked for a password to the disk when there isn't one.
So I took one of the non-working computers from a student and tried to open a file in MS Word. I clicked on the base station in the list of available servers (on the left side of the open sheet). A message popped up on the screen that said I'd reached the maximum number of clients that can access that resource. ...so I opened up the Airport Utility and counted the computers connected to the base station. 27.
I've looked high and low for documentation from Apple that states that only 20 computers can use the "Air Disk" simultaneously. All of their documents say that 50 devices can connect to the base station wirelessly. Nothing about a lesser number connecting to the hard drive.
I really want to have made a mistake somewhere in my setup. Though it seems to be idiot proof.
Can anyone confirm or deny my findings? Or can someone point out some documentation that specifically says otherwise? And if so, how do I make this work?!
My intention was to keep the storage mobile with the lab and not have to put it on my server as the wired network is already substantially loaded down with other stuff. If I have to move it to my server, then that means quite a bit of work re-setting up all the laptops. It'd also chap my hide as the Airport Extreme advertises that it can handle 50.
Help!
-Graham
Message was edited by: gracoat

I did install the disk utility. How do I go about using the disk utility to set up the Hard Drive?
AirPort: How to mount an AirPort Extreme USB hard disk volume in Mac OS X and Windows
Should I install Bonjour for Windows? If so, where can I get it?
Only if you want to access a shared USB printer connected to the AirPort. You can get it here: Bonjour for Windows 1.0.4
Not sure what the drive is formatted in.
The AirPort Extreme (802.11n) supports USB storage devices that have a block size of 512 bytes, and are formatted as Mac OS Extended (HFS-plus), FAT16, or FAT32. It will NOT work with NTFS-formatted volumes.
(ref: AirPort Extreme (802.11n): USB storage device supported formats and protocols

How do I access the firewall in Airport Extreme?

Hello, this may be a very stupid question, but how do I access the firewall in my brand new Airport Extreme? According to the Apple specifications, it contains a built-in firewall, yet I cannot find any mention of this when using Airport Utility to set up the Extreme.
I am using the Extreme connected directly to a modem on the UK BT Infinity fibre optic broadband system using PPoE. The modem is not a combined modem/router, it is a modem only, hence using the Extreme to set up my network, which I have to say (apart from this one question) was incredibly easy. The wireless system is protected as WPA2 Personal.
Router mode is "DHCP and NAT" and "Enable NAT port mapping protocol" is ticked as on - is that it? Is that all I have do to have the firewall on? Should I also have "Enable Default Host" ticked as well? Apologies if this is a silly question - I do not understand firewall set-ups.
I am using 10.7.3 Lion on my MacBook Pro and have a Mac Mini on Snow Leopard connected to the Extreme, plus the usual assortment of iPads, iPhones, Apple TV and iPod Touch.

I don't use this setting, so can't offer much assistance, but do know that your computer is exposed to the Internet, so it will receive all inbound traffic.
Normally, a typical use of Default Host would be to setup a game console to allow online gaming when NAT settings otherwise would not allow communications to occur.
You might want to start a new post for your question...but to get informed responses....you will need to state what you are trying to do. what steps you have performed, etc.

Airport Extreme-NAT-Firewall-TCP-IP-Ports and what not... I BEG FOR HELP!

Problem: I can't use ISPQ (videochat) with my ibookG4 or MacBookPro.
Details: iBookG4 [10.3.9] is the main one, MacBookPro [10.4.7] is the secondary one. I have a DSL modem attached to an Airport Extreme base.
===
I have run a diagnostic test on IsPq and this is the result:
Contacting server with HTTP protocol... success.
Connecting to diagnostic server... success.
Logging into diagnostic server... success.
Testing TCP port 2000 (VideoChat control)... failed.
Testing TCP port 2001 (VideoChat data)... failed.
Testing TCP port 2002 (Quick Message)... failed.
Results:
Your local address is 10.0.1.3, your address as seen by the rest of the world is 151.51.233.232, and your address as seen by our HTTP servers is 151.51.233.232. Your computer is configured to use the following DNS servers: 193.70.192.25, 193.70.152.25, 10.0.1.1.
This computer appears to be behind a NAT firewall, it cannot receive incoming connections. It can still use iSpQ VideoChat, but it will not be able to initiate VideoChat connections and quick messages will be delivered through the server.
If you are using the MacOS X firewall, add an entry for iSpQ VideoChat to allow connections on ports 2000-2002. If you have a router on your network, make sure it is configured to properly route TCP ports 2000-2002 to your computer at 10.0.1.3. Otherwise, contact your network administrator for assistance.
===
Please help me or I will start crying. I'm close to utter desperation.
Thanks,
Emmanuel

Thanks Rick, I was afraind nobody was going to reply.
Let me get this right. In my sharing options I have disabled firewall. So that bit is done. The next bit is about configuring my router, that is my dsl router (Castlenet AR250, I think).
My airport base has nothing to do with it, correct?
Thanks again...

Howto disable the firewall in AEBS Airport Extreme Base Station

Is there any way to do that?
Motivation: I don't want to reroute ports to a DHCP address which changes constantly. Plus: Editing the port reroute list is a pain!
I have no problems with my Asus WL500gP but this thing just doesn't get printing right while all the other funktions work flawlessly.
AEBS plus: Canon ip3000 works perfect over WLAN
AEBS minus: All services relying on ports being redirected are blocked
I have a firewall in my mac which I can switch on and allow services to whatever I want, for the Airport Extreme Base Station, this simply does not work. If I donwload a new Ubuntu torrent with the Asus it's yipiiee, with the AEBS it's 0KB/s. Great.

The only way to disable the "firewall" is to configure the AEBS to act as a bridge. In that mode it is not providing local IP addresses for local machines.
Motivation: I don't want to reroute ports to a DHCP address which changes constantly. Plus: Editing the port reroute list is a pain!
You can configure the AEBS to use DHCP. You can give one of your computers a static IP address outside the range used by the AEBS's DHCP server. Then you can configure the AEBS to recognize that computer as default host (thing DMZ) or you can forward selected ports only to that computer. Once configured you won't need to change anything since that computer is at a static IP address.

Mac can't see new printer-told to Disable Airport Extreme Firewall and Mac Filtering...

I have a new Epson WF-3520 AIO printer. I run Mac on OS X 10.5.7. The printer appears to be properly set up to run wirelessly but it doesn't show up as a choice to be added to my list of available printers. My Mac just doesn't see it. After trying many things Epson's tech support told me to call Apple and find out how to disable the Airport Extreme's firewall as well as Mac Filtering. I went into the Airport's utility and just got lost in knowing exactly what steps I need to take to do this. Also, I'm somewhat dubious that this is really what needs to be done in the first place and I'm wondering if he simply wanted to get off the phone.... All advice welcome! Thanks. Stephanie

Forget it.... My suspicion was correct. I was talking to an idiot. Problem resolved by me. Unrelated to Airport.
Forgot to install a piece of software... duh!!!

Airport Extreme HD access and Norton Personal Firewall

So I have set up my Airport Extreme base station and all is working fine. The only thing is the access to the shared HD from my old PC.
I have found out that I can connect to it with Airport Disk Utility if I disable Norton Personal Firewall. It then works fine when I start the firewall again, but the next time the PC is started up, it has to be disabled. I have given Airport Disk Utility the highest level of permission in the firewall settings, but that does not seem to help.
Has anyone found a solutions for this?

The only way I know that this would have been that "seamless" would be via Back to My Mac (BtMM). BtMM would have required that you had either a MobileMe or iCloud account. Does this sound familar?

Firewall and AirPort Extreme

I am hoping someone can direct me to the appropriate place for this (there really needs to be a security forum).
I need to create a secure wireless network. The features included in the Apple software for the OS and the AirPort Base Station are not enough and we will have to pay fines if we do not secure this network (I say this because I know everyone means well but those that are about to say I don't need anything else might as well know this so they don't waste their time typing). Apparently I need a firewall in between our AirPort base station and the net. I assume this means in between the AEBS and the cable modem (someone correct me if I am wrong). I also assume this has to be a piece of hardware and not software (again, correct me if I am wrong).
I need to know what I am looking for and where to find it. Does it replace the AirPort Base Station or work with it? Does it hinder our use of the net, AEBS, computers, printers, or anything else in any way? Is it difficult to install?
TIA

I just did an <http://grc.com> *Shields Up* test on my Airport Extreme and 192 was NOT open.
So I'm wondering if you have enabled port 192 by mistake on your Airport base station.
Perhaps what you want to do is some *Shields Up* scans while playing the your Airport base station configuration options.
For example do you have *Base Station* -> *Allow configuration over Ethernet WAN port* option enabled?
Do you have Advanced -> *Allow SNMP* or *Allow SNMP over WAN* enabled?
Do you have any anything in Advanced -> *Port Mapping*?
If your using *Shields Up* doesn't show port 192 being open, then perhaps it is not using the same methods your security service is using. In that case work with your security service having them probe while you play with Airport base station configuration options.

HT5022 How do i access the firewall settings of my airport extreme?

i cant find it when i hit edit airport extreme? I really need help

The NAT firewall is either "on" or "off".
Open AirPort Utility, click the AirPort icon, then click Edit
Click the Network tab at the top of the screen
Look at the setting for Router Mode
If Router Mode is set to DHCP and NAT, then the NAT firewall is automatically enabled.
If Router Mode is set to Off (Bridge Mode), then the NAT firewall is not enabled.

Issues with Windows firewall and Airport Extreme

Hi all,
I'm having some issues with my Airport Extreme and Windows Vista firewall. I've got the most current versions of all the airport express software and firmware. My iTunes can see the remote speakers, and I can access the airport extreme using the apple-supplied admin software, so I know that they are working and on the network.
However, when I try to stream music through iTunes, the speakers won't connect. (yes, I have the "stream-music" option checked) However, when I disable windows firewall, they work fine. Therefore, the issue seems to be with a specific port that is not open through windows firewall. When I checked the exceptions for windows firewall, all the associated apple software is listed as exceptions. I think that there is one more port open that I do not have.
Any thoughts?
thanks.

AirPlay/AirTunes is based on the ROAP protocol. I would suggest trying the following ports:
Add TCP 443 for SSL
Add TCP/UDP 554 for RTSP
Add TCP 3689 for DAAP
Add TCP 5000, 6000, and 6001 for ROAP
Add TCP 5297 for Bonjour
Add TCP/UDP 5298 for Bonjour
Add UDP 5353 for Airport discovery
Add TCP/UDP 7070 for RTSP
Add TCP 8000-8999 for iTunes radio streams
Add TCP 42000-42999 for iTunes radio streams

Add IP address ranges to my airport extreme firewall white list.

I need to add IP address ranges to my airport extreme firewall white list. This is so Security Metrics can access my computer and approve a scan for my credit card PCI compliance. How do i add ip ranges?

Sorry, but this option is not available with the AirPort routers. The only control you have over the AirPort's NAT firewall is either to enable/disable it or to configure it for Port Mapping. There are no option that supports whitelisting/blacklisting IP addresses/ranges.
If this is an important requirement, you may need to replace your current AirPort with another vendor's product that will support this.

Effectivness of the Airport Extreme as a Physical Firewall.

I have my Airport Extreme connected to my G5 via Ethernet, and my laptop via the wireless.
Before I purchased the airport I read somewhere that it served as a firewall as well as a Ethernet switch, and also obviously a wireless BS.
How effective is it as a Firewall?
Thanks,
Steve.

Steve,
Go to mac help and enter apple firewall.
It should tell you everything you need to know.

AirPort Extreme Gig - No Firewall???

Similar Messages

Maybe you are looking for