Home/ ProPay WEB/ Router and Firewall Configuration

Router and Firewall Configuration

Your router and firewall protect your network from unauthorized access while allowing legitimate ProPay WEB traffic. This guide explains how to configure your router and firewall to enable external client access to your ProPay WEB server.

Understanding Routers and Firewalls

What is a Router?

A router connects your local network to the internet. It:

  • Shares one internet connection among multiple computers
  • Assigns local IP addresses to network devices
  • Routes traffic between your network and the internet
  • Provides network address translation (NAT)

What is a Firewall?

A firewall protects your network by controlling incoming and outgoing traffic. It:

  • Blocks unauthorized connection attempts
  • Prevents malicious traffic from reaching your computers
  • Allows legitimate traffic you specifically permit
  • Logs security events for review

Most modern routers include a built-in firewall, protecting your entire network from a single device.

Before You Begin

Gather this information before configuring your router:

  • Router's IP address (default gateway)
  • Router's administrative username and password
  • Server's internal static IP address
  • Port number for ProPay WEB (usually 80 for HTTP, 443 for HTTPS)
  • Your external static IP address from ISP

> Important: Paysoft personnel are not trained in router configuration. Contact your router manufacturer's technical support or your IT professional for assistance. For step-by-step router-specific guides, visit http://portforward.com/.

> Important: If you don't have administrative access to your router, contact your IT administrator or network manager.

Accessing Your Router Configuration

Find Your Router's IP Address

  1. Open Command Prompt on any networked computer
  2. Type `ipconfig` and press Enter
  3. Find Default Gateway (e.g., 192.168.1.1)
  4. This is your router's IP address

Log Into Router Interface

  1. Open a web browser
  2. Enter your router's IP address in the address bar
  3. Press Enter
  4. Enter the administrative username and password when prompted

Common Default Credentials:

Router Brand Default Username Default Password
Linksys admin admin or (blank)
Netgear admin password
Cisco admin admin
D-Link admin (blank)
TP-Link admin admin
Asus admin admin
Belkin (blank) (blank)

> Security Note: If you're still using default credentials, change them to a strong password immediately after configuration.

Router Interface Not Loading

If you cannot access the router interface:

  • Verify you're connected to the router's network
  • Try a different web browser
  • Clear your browser cache and cookies
  • Disable VPN if running
  • Power cycle the router and try again
  • Check router documentation for specific access instructions

Configure Router for Static IP

Your router needs to use your ISP's static IP address instead of obtaining one automatically.

Change WAN Connection Type

  1. In router interface, find WAN, Internet, or Setup section
  2. Locate Connection Type or WAN Connection Type
  3. Change from Automatic (DHCP) to Static IP
  4. Enter information from your ISP:
    • Static IP Address: Your ISP-assigned public IP
    • Subnet Mask: From ISP (usually 255.255.255.0)
    • Default Gateway: From ISP
    • Primary DNS: From ISP
    • Secondary DNS: From ISP
    1. Save settings
    2. Restart router if prompted

    Verify WAN Configuration

    After router restarts:

    1. Return to router interface
    2. Check Status or WAN Status page
    3. Verify IP Address shows your static IP from ISP
    4. Confirm Connection Status shows "Connected"
    5. Test internet connectivity from a computer on your network

    Configure Port Forwarding

    Port forwarding directs incoming internet traffic to your ProPay WEB server.

    Understand Port Forwarding

    When a client connects to your external IP address on port 80, the router needs to know which internal computer should receive that traffic. Port forwarding creates this mapping.

    Example:

    • External: 208.57.66.39:80 → Router receives traffic
    • Router forwards to: 192.168.1.2:80 → ProPay WEB server

    Create Port Forwarding Rule

    1. Find Port Forwarding, Virtual Server, NAT, or Applications & Gaming section
    2. Click Add, Create, or similar button
    3. Enter forwarding rule details:

    Application/Service Name:

    • Enter: ProPay WEB

    External/Start Port:

    • Enter: 80

    External/End Port:

    • Enter: 80

    Internal/Server IP Address:

    • Enter: Your server's internal static IP (e.g., 192.168.1.2)

    Internal/Server Port:

    • Enter: 80

    Protocol:

    • Select: TCP or Both (TCP/UDP)

    Enable:

    • Check: Enable or Active
    1. Save or apply the rule

    > Note: Some routers only require the last octet of the internal IP address. For example, if your server is 10.0.0.1, enter 1 in the IP address field. Check your router's documentation if the full IP address does not work.

    > Note: Port 80 is standard for HTTP. If port 80 is in use or blocked by your ISP, you can use an alternative port such as 5899, 8080, or 8888. The port number must match in three places: router port forwarding, IIS website TCP port setting, and Windows Firewall exception. When using a non-standard port, clients must include it in the URL (for example, http://yourdomain.com:5899).

    Add HTTPS Port Forwarding (If Using SSL)

    If you use SSL certificates for HTTPS:

    1. Create a second forwarding rule
    2. Use the same settings as above except:
      • Service Name: ProPay WEB HTTPS
      • External Port: 443
      • Internal Port: 443
      1. Save the rule

      Port Forwarding Examples by Router Brand

      Linksys:

      1. Click Applications & Gaming
      2. Click Single Port Forwarding
      3. Enable a numbered line
      4. Enter application name and ports
      5. Enter server IP address
      6. Click Save Settings

      Netgear:

      1. Click Advanced or Advanced Setup
      2. Click Port Forwarding/Port Triggering
      3. Click Add Custom Service
      4. Enter service name and port information
      5. Enter server IP address
      6. Click Apply

      Cisco:

      1. Click Applications & Gaming
      2. Click Port Range Forward
      3. Enter application name
      4. Enter start and end ports
      5. Enter server IP address
      6. Check Enable
      7. Click Save Settings

      TP-Link:

      1. Click Forwarding
      2. Click Virtual Servers
      3. Click Add New
      4. Enter service port and IP address
      5. Select protocol
      6. Click Save

      Configure Firewall Rules

      Your router's firewall must allow incoming traffic on forwarded ports.

      Check Firewall Settings

      1. Find Security, Firewall, or Advanced Security section
      2. Verify firewall is enabled
      3. Look for any settings blocking incoming connections
      4. Ensure port forwarding rules override general firewall blocks

      Common Firewall Settings

      SPI Firewall (Stateful Packet Inspection):

      • Should be: Enabled
      • This is good - allows established connections while blocking unsolicited traffic

      Block WAN Requests:

      • Should be: Enabled
      • But port forwarding rules should override this for specific ports

      DMZ (Demilitarized Zone):

      • Should be: Disabled
      • Don't use DMZ for ProPay WEB - use port forwarding instead for better security

      Allow Specific Ports

      Some routers require explicitly allowing ports:

      1. Find Access Rules, Inbound Rules, or Firewall Rules
      2. Add a new inbound rule:
        • Service: HTTP (port 80)
        • Action: Allow
        • Source: Any/Internet
        • Destination: Server IP
        1. Add another rule for HTTPS (port 443) if using SSL
        2. Save rules

        Configure Windows Firewall on Server

        Your server's Windows Firewall must also allow web traffic.

        Allow IIS Through Firewall

        1. On the server, open Control Panel
        2. Click Windows Defender Firewall or Windows Firewall
        3. Click Allow an app or feature through Windows Firewall
        4. Click Change settings (requires administrator)
        5. Scroll down and find World Wide Web Services (HTTP)
        6. Check both Private and Public columns
        7. If using SSL, also check Secure World Wide Web Services (HTTPS)
        8. Click OK

        Create Custom Firewall Rule (Alternative Method)

        If IIS is not listed in allowed apps:

        1. In Windows Firewall, click Advanced settings
        2. Click Inbound Rules in left panel
        3. Click New Rule in right panel
        4. Select Port and click Next
        5. Select TCP and enter 80 in specific ports
        6. Click Next
        7. Select Allow the connection
        8. Click Next
        9. Check all three: Domain, Private, Public
        10. Click Next
        11. Name the rule: ProPay WEB HTTP
        12. Click Finish

        Repeat for port 443 if using HTTPS.

        Verify Port Forwarding Configuration

        Test that your configuration works correctly.

        Test Local Access

        1. On the server, open a web browser
        2. Go to `http://localhost`
        3. Verify you see IIS welcome page or ProPay WEB login

        If this fails: Check IIS installation and Windows Firewall.

        Test Internal Network Access

        1. On another computer on your network, open a web browser
        2. Go to `http://[server-internal-ip]` (e.g., http://192.168.1.2)
        3. Verify you see the same page

        If this fails: Check server static IP and Windows Firewall.

        Test External Access

        1. From outside your network (use mobile data or ask someone external), open a browser
        2. Go to `http://[external-static-ip]` (e.g., http://208.57.66.39)
        3. Verify you see ProPay WEB login page

        If this fails: Check router port forwarding and firewall rules.

        Use Online Port Checker

        Test if port 80 is open to the internet using any of these free tools:

        If the test shows the port is closed, review your router and firewall configuration.

        Security Best Practices

        Change Default Router Password

        1. Access router configuration
        2. Find Administration, Management, or System section
        3. Click Change Password or Set Password
        4. Enter current password
        5. Enter new strong password (12+ characters, mixed types)
        6. Save changes
        7. Document new password securely

        Disable Remote Administration

        Prevent external access to your router's configuration:

        1. Find Remote Management or Remote Access setting
        2. Set to Disabled
        3. This prevents internet users from accessing router settings
        4. You can still manage router from your local network

        Enable Logging

        Track connection attempts and security events:

        1. Find Logs, Logging, or System Log section
        2. Enable logging
        3. Review logs periodically for suspicious activity
        4. Look for repeated failed connection attempts

        Update Router Firmware

        Keep your router secure with latest firmware:

        1. Check router manufacturer's website for firmware updates
        2. Download latest stable version
        3. Follow manufacturer instructions to update
        4. Never interrupt firmware update process
        5. Router will restart after update

        Use Strong Encryption

        If your router handles wireless connections:

        1. Find wireless security settings
        2. Use WPA2 or WPA3 encryption (not WEP or WPA)
        3. Set a strong wireless password
        4. Hide SSID broadcast (optional but helps)

        Troubleshooting

        Cannot Access Router After Changes

        Problem: Cannot log into router after configuration changes.

        Solution:

        1. Power cycle the router
        2. Wait 30 seconds before turning back on
        3. Try accessing again
        4. If still fails, perform factory reset (last resort)

        Port Forwarding Not Working

        Problem: External clients cannot connect despite port forwarding.

        Solutions:

        • Verify server's internal IP hasn't changed
        • Confirm port forwarding rule is enabled
        • Check Windows Firewall on server
        • Verify IIS is running on server
        • Test with firewall temporarily disabled (testing only)
        • Contact ISP - they may block port 80

        ISP Blocks Port 80

        Problem: ISP blocks residential customers from hosting on port 80.

        Solution:

        1. Use a different port (e.g., 8080, 5899)
        2. Update port forwarding to use new port
        3. Configure IIS to listen on new port
        4. Clients access via http://yourdomain.com:8080

        Multiple Servers Need Port 80

        Problem: Need to run multiple web servers on one network.

        Solution:

        1. Only one server can use external port 80
        2. Use port 80 for primary server
        3. Use alternate ports (8080, 8081) for others
        4. Or use a reverse proxy to distribute traffic

        Router-Specific Resources

        For detailed instructions specific to your router model:

        Linksys:

        Netgear:

        Cisco:

        TP-Link:

        Asus:

        Related Topics

        ← Back to Index