Recommend:
To the knowledge base
Knowledge document #131

Setting up an exposed host in the FRITZ!Box

By default, the FRITZ!Box firewall protects all of the devices in the home network from unauthorized access from the internet.

By setting up an exposed host, you can open up a device for the internet without having to open all of the individual ports it requires. In this case you can choose to allow only IPv4 internet access, only IPv6 internet access, or allow both IPv4 and IPv6 internet access.

Setting up an exposed host can make sense if you are operating another router with an integrated firewall with the FRITZ!Box, and that router makes server services available.

Important:If possible, only use the exposed host for testing purposes. It is safer if you only share the ports that are actually necessary.

Note:An exposed host is often confused with a DMZ (demilitarized zone). A DMZ is a special network that can be accessed from the internet as well as the local network (LAN). A firewall completely blocks access from the DMZ to the LAN. FRITZ!Box does not support the implementation of a DMZ.

Requirements / Restrictions

  • An exposed host can be enabled for only one device for IPv4. For IPv6, the exposed host can be enabled for all devices.
  • Incoming connections to destination ports for which you configured separate IPv4 port sharing rules are not forwarded to the "exposed host". Instead, they are forwarded to the device specified in the separate port sharing rule.
  • When the exposed host is active, the device is not protected by the FRITZ!Box's firewall.

Setting up an exposed host

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Permit Access" in the "Internet" menu.
  3. Click on the "Port Sharing" tab.
  4. Click the (Edit) button for the (computer) name of the device that you want to set up an exposed host for. If you have not configured any sharings for the device yet:
    1. Click "Add Device for Sharing".
    2. Select the (computer) name of the device from the drop-down list "Device".

      Note:If you cannot select the device, you can select "Enter the IP address manually" and enter the IP address. Only devices that automatically obtain their IP settings (DHCP) from the FRITZ!Box are listed in the drop-down list.

  5. If you want to allow all IPv4 internet access for the device, enable the option "Open this device completely for internet sharing via IPv4 (exposed host)".
  6. If you want to allow all IPv6 internet access for the device, enable the option "Open this device completely for internet sharing via IPv6 (exposed host)".

    Note:This option is only displayed if IPv6 support is enabled in the FRITZ!Box under "Internet > Type of Connection / Account Information > IPv6".

  7. Click "Apply" to save the settings.
Language selection