@zivshosh 

 

Would you be able to describe in more detail how you have set this up?  the tplink model you have is a modem router also.

 

What is your current IP address and how are you connected to the device?   Any screenshots you can add would help us address this

 

@Philbert 

meanwhile the problem was solved by resetting the router.

to complete the picture: I'm with windows 10 pro winver 1809

as modem I use a lousy cable device by sagemcom I was given by my internet infrastructure provider,

it used to be modem-router and all went well but unsafe. I bought a new tp-link td-w9970 as a router.

Turned sagemcom into modem only by bridging.

the problem was wheb I tried to configure the td-w9970.

I didn't know what to do with dynamic DNS but changed it and from than on the pc could not connect.

after resetting I left dynamic DNS untouched and I still have internet.

I have difficulty in configuring forwarding and firewall and would like to get some source of written material on the subject.

The user guide did not help and there are many things I don't understand there.

Thank you

 

 

@zivshosh 

 

Hey

 

Glad you got the internet working ok for you, sagecom hardware is pretty bad yes... personally I would have ripped that out 

 

In relation to the manual, TP Link documents are usually pretty good and quick skim of this it seems the usual standard.   Its unlikely you will get other manuals for this, probably better to ask what you are trying to achieve and hopefully some of us can help you.

 

What are you trying to accomplish with Port Forwarding and Firewall?

 

@Philbert 

Thank you for your prompt answer:

firewall:

where do I find lan host or wan host? do I need both?

forwarding:

where do I find service port, ip address, internal port of programs I want to forward?

simple but I could not understand from the user guide and didn't see anything in the support section of tp-link site

hence I'm in doubt if I'll be able to decipher other posts asking similar questions regarding other tp-link routers.

Is it preferable to enable firewall? or should I use a third party programs that look easier like windows firewall control?

thanks again

I have a lot of experience in pc's but a complete newbie in communication

 

 

@zivshosh 

 

Hey

 

Ok so the firewall on this is pretty standard SPI (Stateful packet inspection) firewall, its either OFF or ON and there is no fiddling or settings required here.  To be honest just enable it and let it work away.  Should do the job without any issues

 

Port forwarding, this is sometimes referred to as Virtual Server and TP Link use this term.. check under   advanced > NAT forwarding >  Virtual Servers.   In here when you click ADD there is a list of common services that people need forwarded along with the ports / protocols, you just then need to point it to the IP (interanally) of what you want to connect to.   Below is an example for OPEN VPN client, try to keep the external and internal ports the same, not necessary but easier.   If your service isnt on the list available you might need to manually set the ports and protocols, just google the ports as these are common enough.

 

In the example below any UDP packets coming from the internet on 1194 will be forwared to 192.168.xxx.xx  on port 1194.  

 

Once you create this it will automatically add that exception to the firewall, no intervention needed

 

 

Software firewalls..  too little defense if honest, always have your router firewall on.  If something is into your network enough to hit software firewall you are in trouble, software firewalls are good for stopping stuff spreading internally (virus, broadcast etc) but really not your main defense.   Just leave the router firewall on

 

 

 

@Philbert 

many many thanks!

So firewall is like an antivirus or internet security? it "knows" what activity should be  blocked?

as for forwarding: I have to digest your answer and see what do I have to do.

thanks also for your software tip, though Microsoft didn't ask me when I installed windows and it is there and I never look at it

So far it never interfered with my work.

 

 

@Philbert 

many many thanks!

So firewall is like an antivirus or internet security? it "knows" what activity should be  blocked?

as for forwarding: I have to digest your answer and see what do I have to do.

thanks also for your software tip, though Microsoft didn't ask me when I installed windows and it is there and I never look at it

So far it never interfered with my work.

 

 

@Philbert 

many many thanks!

So firewall is like an antivirus or internet security? it "knows" what activity should be  blocked?

as for forwarding: I have to digest your answer and see what do I have to do.

thanks also for your software tip, though Microsoft didn't ask me when I installed windows and it is there and I never look at it

So far it never interfered with my work.

 

 

@zivshosh 

 

It kinda is in a loose way, better to say its a security guard / man at the door

 

SPI firewalls looks at the traffic going in and out of the router...  say it knows traffic has been going in and out on ports  80 and 100 happily    then suddenly port 10,000 tries to access from the internet.. it sees this and rejects.  Basically filters out the obvious stuff.   As long as there is normal traffic on a port it will keep that port open for a period of time, any strange traffic it will block

 

DPI (Deep Packet Inspection) firewalls are a lot more advanced but EXPENSIVE!   These look at each packet itself and judge it on an individual basis, as you can imagine this takes tremendous processing time so big beast to run it on..  Unless $$ is not an issue you wont ever use a DPI firewall

 

Software firewalls are more for internal use, stopping printers doing strange things or virus spreading etc etc.. they just generally work and dont need any adjustment.

 

 

many thanks again Since I enabled firewall I don't see my wireless printer. Does this call for forwarding or adding something to allow in the firewall. I'm also worried about RalinkLinuxClient and bizarre phones I see on my network, for which I have only MAC address do I need a sniffer to get more information?