Explore the guide library · Router security
Identify the service, destination and external access requirement before opening an inbound route.
A port-forwarding rule creates a route from an external connection to a specific internal service. Add one only when you understand which service must be reachable and why. It is not a general fix for slow downloads, weak Wi-Fi or an application that has never worked locally.
Prove the local service first
Confirm that the intended server works from another device on the home network. Record its address, listening port and protocol from the application’s official documentation. Give the destination a stable address through a supported reservation or documented network plan.
GL.iNet’s forwarding guide distinguishes the external port, internal address, internal port and protocol. These fields describe different parts of the route; filling them all with the same convenient number does not establish a correct rule.
Assess the external path
Identify any upstream router or provider address-sharing arrangement. If your router is behind another gateway, a rule on the inner router alone may not create public reachability. Ask the ISP about inbound access when the service arrangement is unclear.
Keep the rule narrow
- Use only the protocol and port required by the documented service.
- Apply source restrictions when supported and appropriate.
- Keep the service patched and protected by suitable authentication.
- Describe the rule clearly and note when it should be removed.
Do not place a general-purpose computer in DMZ merely because a narrowly scoped rule has not worked. That changes the exposure much more broadly and obscures the original diagnostic question.
Verify from the right place
Test the authorized service from a genuinely external connection using its normal client. An internal test to the public address can depend on separate router behavior. Confirm that the intended function works and that unrelated services remain inaccessible.
When the project ends, disable the rule and repeat the external check. A maintained access inventory is as important as a successful initial connection.
Sources and editorial notes
Sources checked 8 October 2026. Independent guidance and original illustrations; product comparisons use published specifications rather than hands-on benchmarks. Check the exact model, revision and regional documentation before changing settings.