Security

This article introduces the Broadband Firewall, available to all broadband customers.

1. Introduction
2. Basic Settings
3. Advanced Settings
4. Testing your firewall
5. Troubleshooting

1. Introduction

The Broadband Firewall is a straightforward and simple way to help protect your broadband connection and any computers using it. By enabling the Broadband Firewall, you can block unwanted connections to your computer from the Internet. This can help to reduce the risk of harm to your computer caused by hackers and viruses.

All Internet traffic is sent in what are called 'packets'. If you load a web page or download an email, all the data transferred as part of the process is done using these packets.

Each packet of data contains various pieces of information about the packet itself. This includes such things as the packet type, the priority of the packet and for data which is split across multiple packets, will also contain information which allows those packets to be assembled into the correct order when received.

A firewall is a piece of software or hardware which allows these packets of data to be filtered. There any many ways that this can be achieved, the PlusNet firewall uses port numbers to block packets. A port is a dedicated channel for a particular type of traffic. Although different ports can be used for certain types of Internet traffic, they do tend to use what are called 'Common ports'. For instance, most web servers use port 80, POP3 email uses port 110.

The PlusNet firewall lets you choose which of these ports can accept Internet traffic and which are blocked. By doing this, you can limit the ability for other people to access your computer or network.
[Top]

2. Basic Settings

For most users, the Basic Settings will be more than adequate in choosing which Internet traffic you wish to allow.

Click to edit your Broadband Firewall Basic Settings.

Remember! If you change your firewall setting, you must restart your Internet connection for the change to take effect.

There are three basic settings available, these are as follows:

Option	Port Restrictions
Off	This turns your firewall off completely. No protection will be provided and all Internet traffic will be allowed through to your computer or network. This setting is only recommended for advanced users or for troubleshooting problems with your connection.
Low	This offers good general protection. It will stop the majority of Internet intrusion attempts from being successful. It allows the more common Internet traffic through to your computer or network. Note: If you are wishing to run VPN software, you need to select this mode, the 'High' setting will not allow VPN connections.
High	The 'High' setting blocks all incoming Internet traffic, i.e. this will stop any external source from making a connection to your network or computer. This offers the highest level of security. If you find that you can't use certain Internet applications, try changing your setting to 'Low'. Note: The 'High' setting will prevent the use of VPN software, Active FTP sessions and software which lets you to synchronise your computer's time using an external source. If you want to use these applications, switch to the 'Low' setting.

Click to edit your Broadband Firewall Basic Settings.

Remember! If you change your firewall setting, you must restart your Internet connection for the change to take effect.
[Top]

3. Advanced Settings

The Advanced Settings do not provide more or higher protection that the Basic Settings, they are provided to give you greater control of your connection. E.g. If you want to run your own web server on your computer or network, you can use the Advanced settings to allow this while still stopping other types of incoming connections.

If you are unsure which options are suitable for your connection, we advise you to use the Basic Settings so as not to expose yourself to unnecessary risk by using the wrong settings.

Click to edit your Broadband Firewall Advanced Settings.

Remember! If you change your firewall setting, you must restart your Internet connection for the change to take effect.

The options available under Advanced Settings are as follows:

Setting	Port Restrictions
Off	This turns your firewall off completely. No protection will be provided and all Internet traffic will be allowed through to your computer or network. This setting is only recommended for advanced users or for troubleshooting problems with your connection.
Low	This offers good general protection. It will stop the majority of Internet intrusion attempts from being successful. It allows the more common Internet traffic through to your computer or network. Note: If you are wishing to run VPN software, you need to select this mode, the 'High' setting will not allow VPN connections.
High	The 'High' setting blocks all incoming Internet traffic, i.e. this will stop any external source from making a connection to your network or computer. This offers the highest level of security. If you find that you can't use certain Internet applications, try changing your setting to 'Low'. Note: The 'High' setting will prevent the use of VPN software, Active FTP sessions and software which lets you to synchronise your computer's time using an external source. If you want to use these applications, switch to the 'Low' setting.
Block common ports	All traffic to common ports below 1024 are blocked. These ports are normally used for provide Internet services, such as email.
Block common ports except HTTP and HTTPS	All traffic to common ports below 1024 are blocked, with the exception of ports 80 and 443. This allows you to block incoming traffic whilst allowing a web server to be run. Note: You don't need this setting if you are only wanting to browse websites.
Block common ports except SMTP	All traffic to common ports below 1024 are blocked, with the exception of port 25. This allows you to block incoming traffic whilst allowing a mail server to be run allowing incoming email. Note: You don't need this setting if you are only sending and receiving email with desktop email software.
Block common ports except HTTP, HTTPS and SMTP	All traffic to common ports below 1024 are blocked, with the exception of ports 25, 80 and 443. This allows you run both a web server and mail server through your Internet connection. Note: You don't need this setting if you are only sending and receiving email with desktop email software and are wanting to browse websites.

Click to edit your Broadband Firewall Advanced Settings.

Remember! If you change your firewall setting, you must restart your Internet connection for the change to take effect.
[Top]

4. Testing your firewall

If you want to test that your firewall is working correctly, we would recommend using an online security checker, e.g. Shields UP. This will confirm that your firewall is running properly.

You can find the Shields UP firewall test at http://www.grc.com/intro.htm (opens in new window)

Note: Shields UP is an external website and PlusNet has no control over its content.
[Top]

5. Troubleshooting

It is possible that some software may not function correctly after changing your Broadband Firewall. If you find you are having problems, first try using the 'Low' option in Basic Settings.

If you are having problems with your VPN software, use the 'Low' option in Basic Settings. This is the only Broadband Firewall setting that will definitely work with VPN software.

In general, if you are having problems with particular applications, lower your firewall settings in steps, retesting after each change to see if the problem can be resolved. If the problem is still present with the Broadband Firewall turned off, then the cause of the problem lies elsewhere.

Remember! If you change your firewall setting, you must restart your Internet connection for the change to take effect.
[Top]

Page last updated 22nd August 2007