System information

165Chapter 10 Managing Server Information
If you’ve changed the NAT options on your AirPort Extreme Base Station or Time
Capsule to use your server as the “default host,” you need to use the server’s rewall
to control security, not the AirPort management. In this case, do not click “Switch to
AirPort management” in the Security pane. By default, an AirPort Extreme Base Station
or Time Capsule has the default host option turned o.
If you see a “Switch to Firewall security” button in the Security pane, don’t click the
button if you’re using the default NAT options on your AirPort Extreme Base Station or
Time Capsule. Click this button only if you’ve changed the “default host” option in the
NAT pane of the AirPort Utility application.
2 In the Security pane of Server Preferences, click the On/O switch to turn on security
control.
3 To allow a service to accept incoming connections from all networks, including the
Internet, click the Add (+) button and choose the service from the pop-up menu.
If the service you want to add isn’t listed in the pop-up menu, choose Other, and then
enter the service name and port. For a list of service names and ports, open Server
Admin and then use the Help menu to search for “TCP and UDP port reference.”
4 To stop a listed service from accepting incoming connections from all networks
including the Internet, select the service and click the Delete (–) button.
While security control is on, services that aren’t listed in the Security pane can get
incoming connections only from the server’s local network.
If you you’re using AirPort management and make changes in the Security pane, Server
Preferences asks if you want to apply your changes by restarting your base station
or Time Capsule. Restarting will interrupt Internet access and DHCP service for all
computers on your local network for up to a minute.