Page 66 / 155 Scroll up to view Page 61 - 65
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
65
Packet Filter – Add TCP/UDP Filter
Rule Name:
Users-define description to identify this entry or click
to select existing
predefined rules. The maximum name length is 32 characters.
Time Schedule:
It is self-defined time period.
You may specify a time schedule for your prioritization
policy. For setup and detail, refer to
Time Schedule
section
Source IP Address(es) / Destination IP Address(es):
This is the Address-Filter used to allow or block
traffic to/from particular IP address(es).
Selecting the
Subnet Mask
of the IP address range you wish to
allow/block the traffic to or form; set IP address and Subnet Mask to
0.0.0.0
to inactive the Address-Filter
rule.
Tip:
To block access, to/from a single IP address, enter that IP address as the
Host IP Address
and use
a
Host Subnet Mask
of “255.255.255.255”.
Type:
It is the packet protocol type used by the application, select
TCP
,
UDP
or both
TCP/UDP.
.
Source Port:
This Port or Port Ranges defines the port allowed to be used by the Remote/WAN to
connect to the application.
Default is set from range
0 ~ 65535.
It is recommended that this option be
configured by an advanced user.
Destination Port:
This is the Port or Port Ranges that defines the application.
Inbound / Outbound:
Select
Allow
or
Block
the access to the Internet (
“Outbound”
) or from the
Internet (
“Inbound”
).
Click
Apply
button to apply your changes.
Page 67 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
66
Packet Filter – Add Raw IP Filter
Rule Name:
Users-define description to identify this entry or click
to select existing
predefined rules.
Time Schedule:
It is self-defined time period.
You may specify a time schedule for your prioritization
policy. For setup and detail, refer to
Time Schedule
section
Protocol Number:
Insert the port number, i.e. GRE 47.
Inbound / Outbound:
Select
Allow
or
Block
the access to the Internet (
“Outbound”
) or from the
Internet (
“Inbound”
).
Click
Apply
button to apply your changes.
Page 68 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
67
Example: Configuring your firewall to allow for a publicly accessible web server on your LAN
The predefined port filter rule for HTTP (TCP port 80) is the same no matter whether the firewall is set to a
high, medium or low security level. To setup a web server located on the local network when the firewall is
enabled, you have to configure the Port Filters setting for HTTP.
As you can see from the diagram below, when the firewall is enabled with one of the three presets
(Low/Medium/High), inbound HTTP access is not allowed which means remote access through HTTP to
your router is not allowed.
Note:
Inbound indicates accessing from Internet to LAN and Outbound is from LAN to the Internet.
Page 69 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
68
Configuring Packet Filter:
1.
Click
Port Filters
. You will then be presented with the predefined port filter rules screen (in this case
for the low security level), shown below:
Note:
You may click Edit the predefined rule instead of Delete it.
This is an example to show to how you add
a filter on your own.
2.
Click
Delete
to delete the existing HTTP rule.
3.
Click
Add TCP/UDP Filter
.
4.
Input the Rule Name, Time Schedule, Source/Destination IP, Type, Source/Destination Port,
Inbound and Outbound.
Example
:
Application:
Cindy_HTTP
Time Schedule:
Always On
Source / Destination IP Address(es):
0.0.0.0
(I do not wish to active the address-filter, instead I
use the port-filter)
Type:
TCP (Please refer to Table1: Predefined Port Filter)
Source Port:
0-65535
(I allow all ports to connect with the application))
Redirect Port:
80-80
(This is Port defined for HTTP)
Inbound / Outbound:
Allow
Click Add TCP/UDP Filter
Click Delete
Page 70 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
69
5.
The new port filter rule for HTTP is shown below:
6.
Configure your Virtual Server (“port forwarding”) settings so that incoming HTTP requests on port 80
will be forwarded to the PC running your web server:
Note:
For how to configure the HTTP in Virtual Server, go to Add Virtual Server in Virtual Server section for
more details.

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top