Setting up a TCP/UDP pinhole

A pinhole is a rule within a router that forwards incoming TCP connections, or UDP packets to a particular computer on the local area network. A pinhole is also known as a "virtual server", "virtual service", "packet forward", "port redirection", "NAPT (network address port translation)", and many others.

This document covers having a single computer connected directly to the internet, e.g. dial-up modem, internal ADSL modem, PPPoE ADSL modem, etc. And also having a single or multiple computers connected to the internet through a router.

Direct connection to the internet

A pinhole is not strictly necessary when connected directly to the internet, however depending on the software you are running there may still be some configuration required.
First uninstall any 3rd party firewall software that is installed on the machine. We do not support third party firewall software at all.
If you are running windows XP then you may need to disable the firewall on your internet connection, or configure it properly. If you are not running windows XP then you are done.

Disabling the connection firewall for windows XP

  1. Disconnect from the internet
  2. Right click on "My Network places", and select properties. My Network Places will either be in your start menu, or on your desktop.
  3. Right click on your internet connection, and select properties.
  4. Go to the advanced tab.
  5. Unclick "Internet connection firewall".

Configuring the connection firewall for windows XP

  1. Disconnect from the internet
  2. Right click on "My Network places", and select properties. My Network Places will either be in your start menu, or on your desktop.
  3. Right click on your internet connection, and select properties.
  4. Go to the advanced tab.
  5. Press the setting button.
  6. Click Add.
  7. In the description of service field enter some textual description of the port your are setting up. e.g. vnc, terminal, etc
  8. In the name or ip address field enter 127.0.0.1 (this means "this computer")
  9. Enter the port number in the "external port number" field, and in the "internal port number" field.
  10. Select TCP or UDP, and press OK.
  11. Press OK in the preceeding dialog, then OK again.
  12. Reconnect to the internet.

Connection through a router

A pinhole will be required when connecting through a router. Most routers have a web configuration interface. This means that you can set them up using a browser. It is preferable for you to reference the documentation that came with your browser. If this is not available then you may use the following information. Selective Communications is not liable for the accuracy of the following information.
To find the ip address of your router (necessary to connect to it with a browser) follow these steps:

Finding your router's IP address, and your IP address

  1. Press 'Start', then 'Run'.
  2. type cmd then press OK.
  3. type ipconfig and press enter.
  4. You will receive output like the following: 
    Windows 2000 IP Configuration

 Ethernet adapter Local Area Connection 1:

  Connection-specific DNS Suffix  . : selective.local
  IP Address. . . . . . . . . . . . : 192.168.1.2
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . : 192.168.1.254
  5. The IP address entry is your LAN IP address.
  6. The Default Gateway is the address of your router. Typical values for this IP address are: 192.168.1.1, 192.168.1.254, 192.168.0.1, 192.168.0.254.
  7. Write down these numbers. Then close the cmd window.

Configuring your router through it's web interface

  1. Start your web browser.
  2. In the URL field enter http://router/, where router is the ip address of your router, e.g. http://192.168.1.1/
  3. Press enter.
  4. A login page, or a welcome page should be displayed by your router.
  5. Configure your router. For instructions about specific routers see below.

Configuring a D-Link DSL500

  1. Press "Login to the web-based management module"
  2. Enter the username 'admin', and password. The default password is 'admin', but you may have changed this.
  3. At the top left of the screen press the configuration folder, then select Port Redirection.
  4. A list of port redirections is shown on the right. Press 'Add' to add a new one.
  5. Enter a description of the port you wish to forward in the Comment field.
  6. Enter the port number in the Internet port, and Local port fields.
  7. Select TCP or UDP.
  8. Enter the LAN IP address of your computer in the Local Computer field.
  9. Click OK.
  10. When prompted Select OK to save, and reboot now.
  11. After about 30 seconds the router should finish rebooting and your port redirection should be completed.

Configuring a Nokia M(W)1122

Note: this is for either a MW1122 or an M1122.
  1. Enter your username, and password. Defaults are 'admin' for both.
  2. Select 'Service Providers' on the left hand column.
  3. Near the bottom of the page; ensure "Network address port translation" is checked.
  4. ensure "Stateful Inspection Firewall" is unchecked.
  5. Click 'Services' on the left hand column.
  6. First you need to enter a service name. Enter a description of the port you wish to forward in the service name field.
  7. Select the protocol (UDP, or TCP)
  8. Enter the port number in the Start field, leave the End field blank.
  9. Press 'Add new'.
  10. Select NAPT from the column along the top.
  11. Select the service you just entered in the Service dropdown list.
  12. Enter the LAN IP address of your computer in the LAN address field.
  13. Leave the WAN port empty, and click Add new.
  14. Select 'Save Config' in the column on the left.
  15. Press the 'Save configuration' button.

Configuring a Windows XP machine

If your router is a windows XP machine, ie you are not directly connected to the internet, but connected to a windows XP machine that is, then see "Configuring the connection firewall for windows XP" (above), but instead of entering 127.0.0.1 in the ip address field, enter your LAN IP address.