Page 91 / 165 Scroll up to view Page 86 - 90
Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
87
Mail Alert
Mail alert is designed to keep system administrator or other relevant personnels alerted of any
unexpected events that might have occured to the network computers or server for monitoring efficiency.
With this alert system, appropriate solutions may be tackled to fix problems that may have arisen so that
the server can be properly maintained.
SMTP Server:
Enter the SMTP server that you would like to use for sending emails.
Username:
Enter the username of your email account to be used by the SMTP server.
Password:
Enter the password of your email account.
Sender’s Email:
Enter your email address.
Recipient’s Email (Failover / Failback):
Enter the email address that will receive the alert message
once a computer / network server failover occurs.
Recipient’s Email (WAN IP Change Alert):
Enter the email address that will receive the alert message
once an WAN IP change has been detected.
Page 92 / 165
Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
88
When using Virtual Servers your PCs will be exposed to the degree
specified in your Virtual Server settings provided the ports specified are
opened in your firewall packet filter settings.
Firewall and Access Control
Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet access from
your LAN, as well as helping to prevent attacks from hackers. Besides, when using NAT, the router acts
as a “natural” Internet firewall, as all PCs on your LAN will use private IP addresses that cannot be
directly accessed from the Internet.
Firewall
: Prevents access from outside your network. The router provides three levels of security
support:
NAT natural firewall
: This masks LAN users’ IP addresses which is invisible to outside users on the
Internet, making it much more difficult for a hacker to target a machine on your network. This natural
firewall is on when NAT function is enabled.
Firewall Security and Policy (General Settings)
: Inbound direction of Packet Filter rules to prevent
unauthorized computers or applications accessing your local network from the Internet.
Intrusion Detection
: Enable Intrusion Detection to detect, prevent and log malicious attacks.
Access Control
: Prevents access from PCs on your local network:
Firewall Security and Policy (General Settings)
: Outbound direction of Packet Filter rules to prevent
unauthorized computers or applications accessing the Internet.
URL Filter
: To block PCs on your local network from unwanted websites.
Here are the items within the
Firewall
section:
General Settings, Packet Filter, Intrusion Detection,
URL Filter, IM/P2P Blocking
and
Firewall Log.
Page 93 / 165
Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
89
General Settings
You can choose not to enable Firewall and still able to access to URL Filter, Intrusion Detection and
IM/P2P Blocking or enable the Firewall using preset filter rules and modify the port filter rules as required.
The Packet Filter is used to filter packets based-on Applications (Port) or IP addresses.
There are four options when you enable the Firewall, they are:
All blocked/User-defined
: no pre-defined port or address filter rules by default, meaning that
all inbound (Internet to LAN) and outbound (LAN to Internet) packets will be blocked. Users have to
add their own filter rules for further access to the Internet.
High/Medium/Low security level:
the predefined port filter rules for High, Medium and Low
security are displayed in Port Filters of Packet Filter.
Select either
High, Medium
or
Low
security level
to enable the Firewall. The only difference between
these three security levels is the preset port filter rules in the Packet Filter. Firewall functionality is the
same for all levels; it is only the list of preset port filters that changes between each setting. For more
detailed on level of preset port filter information, refer to
Table 1: Predefined Port Filter
.
If you choose of the preset security levels and add custom filters, this level of filter rules will be saved
even and do not need to re-configure the rules again if you disable or switch to other firewall level.
The “
Block WAN Request
” is a stand-alone function and not relate to whether security enable or disable.
Mostly it is for preventing any scan tools from WAN site by hacker.
(Changed the format only.)
Any remote user who is attempting to perform this action may result in
blocking all the accesses to configure and manage of the device from the
Internet.
Page 94 / 165
Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
90
Packet Filter
This function is only available when the Firewall is enabled and one of these four security levels is chosen
(All blocked, High, Medium and Low).
The preset port filter rules in the Packet Filter must modify
accordingly to the level of Firewall, which is selected.
See
Table1: Predefined Port Filter
for more
detail information.
Page 95 / 165
Billion BiPAC 7402NX(L) 802.11n 3G/ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
91
Example:
Predefined Port Filters Rules
The predefined port filter rules for High, Medium and Low security levels are listed. See Table 1.
Note:
Firewall – All Blocked/User-defined, you must define and create the port filter rules yourself. No predefined
rule is being preconfigured.
Table 1: Predefined Port Filter
Port Number
Firewall - Low
Firewall - Medium
Firewall – High
Application
Protocol
Start
End
Inbound
Outbound
Inbound
Outbound
Inbound
Outbound
HTTP(80)
TCP(6)
80
80
NO
YES
NO
YES
NO
YES
DNS (53)
UDP(17)
53
53
NO
YES
NO
YES
NO
YES
DNS (53)
TCP(6)
53
53
NO
YES
NO
YES
NO
YES
FTP(21)
TCP(6)
21
21
NO
YES
NO
YES
NO
NO
Telnet(23)
TCP(6)
23
23
NO
YES
NO
YES
NO
NO
SMTP(25)
TCP(6)
25
25
NO
YES
NO
YES
NO
YES
POP3(110)
TCP(6)
110
110
NO
YES
NO
YES
NO
YES
NEWS(NNTP)
(Network
News
Transfer Protocol)
TCP(6)
119
119
NO
YES
NO
YES
NO
NO
RealAudio/
RealVideo
(7070)
UDP(17)
7070
7070
YES
YES
YES
YES
NO
NO
PING
ICMP(1)
N/A
N/A
NO
YES
NO
YES
NO
YES
H.323(1720)
TCP(6)
1720
1720
YES
YES
NO
YES
NO
NO
T.120(1503)
TCP(6)
1503
1503
YES
YES
NO
YES
NO
NO
SSH(22)
TCP(6)
22
22
NO
YES
NO
YES
NO
NO
NTP /SNTP
UDP(17)
123
123
NO
YES
NO
YES
NO
YES
HTTP/HTTP
Proxy
(8080)
TCP(6)
8080
8080
NO
YES
NO
NO
NO
NO
HTTPS(443)
TCP(6)
443
443
NO
YES
NO
YES
N/A
N/A
ICQ (5190)
TCP(6)
5190
5190
YES
YES
N/A
N/A
N/A
N/A
MSN (1863)
TCP(6)
1863
1863
YES
YES
N/A
N/A
N/A
N/A

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top