Page 126 / 166 Scroll up to view Page 121 - 125
Ethernet MAC Filter
A MAC (Media Access Control) address is the unique network hardware identifier for each PC on
your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC
Address Filter function, you can configure the network to block specific machines from accessing
your LAN.
There are no pre-defined MAC address filter rules, you can add the filter rules to you’re your
requirements.
The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.
Filter Action
Action: Select an action for MAC Filter. This feature is disabled by default. Check Allow or Block to
activate the filter.
Parameters
MAC Address: Enter the ethernet MAC addresses you wish to have the filter rule applies.
Time Schedule: A self defined time period. You may specify a time schedule for your prioritization
policy. For setup and detail, refer to Time Schedule section.
122
Page 127 / 166
Wireles MAC Filter
A MAC (Media Access Control) address is the unique network hardware identifier for each PC on
your network’s interface (i.e. its Network Interface Card or Ethernet card). Using your router’s MAC
Address Filter function, you can configure the network to block specific machines from accessing
your LAN.
There are no pre-defined MAC address filter rules, you can add the filter rules to you’re your
requirements.
The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.
Filter Action
Action:
Select an action for MAC Filter. This feature is disabled by default. Check Allow or Block
to activate the filter.
Parameters
MAC Address:
Enter the wireless MAC addresses you wish to have the filter rule applies.
123
Page 128 / 166
Intrusion Detection
The router Intrusion Detection System (IDS) is used to detect hacker’s attack and intrusion attempts
from the Internet. If the IDS function of the firewall is enabled, inbound packets are filtered and
blocked depending on whether they are detected as possible hacker attacks, intrusion attempts or
other connections that the router determines to be suspicious.
Max TCP Open Handshaking Count:
This is a threshold value to decide whether a SYN Flood
attempt is occurring or not. Default value is 100 TCP SYN per seconds.
Max PING Count:
This is a threshold value to decide whether an ICMP Echo Storm is occurring or
not. Default value is 15 ICMP Echo Requests (PING) per second.
Max ICMP Count:
This is a threshold to decide whether an ICMP flood is occurring or not. Default
value is 100 ICMP packets per seconds except ICMP Echo Requests (PING).
Log:
Select Enable for this option if you will like to capture the logs for this Packet filter policy.
Block WAN Ping
This feature is to be enabled when you want the public WAN IP address on your router not to
respond to any ping command.
This feature is disabled by default. To activate the Block WAN PING feature, check the Enable box
and then click the Apply button.
124
Page 129 / 166
URL Filter
URL (Uniform Resource Locator) (e.g. an address in the form of http://www.abcde.com or http://
www.example.com) filter rule allows you to prevent users on your network from accessing specific
websites defined by their URL. There are no predefined URL filter rules, therefore you can add filter
rules to meet your requirements.
Keywords Filtering:
Allow blocking against specific keywords within a particular URL rather than
having to specify a complete URL (e.g. to block any image called “advertisement.gif”). When enabled,
your specified keywords list will be checked to see if any keywords are present in URLs accessed
to determine if the connection attempt should be blocked. Please note that the URL filter blocks web
browser (HTTP) connection attempts using port 80 only.
Domains Filtering:
This function checks the whole URL address but not the IP address against
your list of domains to block or allow. If it is matched, the URL request will either be sent (Trusted)
or dropped (Forbidden).
Restrict URL Features:
Click Block Java Applet to filter web access with Java Applet components.
Click Block ActiveX to filter web access with ActiveX components. Click Block Cookie to filter web
access with Cookie components. Click Block Proxy to filter web proxy access.
Exception List:
You can input a list of IP addresses as the exception list for URL filtering.
Time Schedule:
A self defined time period. You may specify a time schedule for your prioritization
policy. For setup and detail, refer to Time Schedule section.
Log:
Select Enable for this option if you will like to capture the logs for this URL filter policy.
125
Page 130 / 166
Keywords filtering
Click the checkbox to enable this feature. To edit the list of filtered keywords, click Details.
Enter a keyword to be filtered and click Apply. Your new keyword will be added to the filtered
keyword listing.
Domains Filtering
Click the top checkbox to enable this feature. To edit the list of filtered domains, click Details.
Enter a domain and select whether this domain is trusted or forbidden with the pull-down menu.
Next, click Apply. Your new domain will be added to either the Trusted Domain or Forbidden Domain
listing, depending on which you selected previously.
Except IP Address
You may also designate which IP addresses are to be excluded from these filters by adding them to
the Exception List. To do so, click Details.
Select the IP version(IPv4 or IPv6) to identify of which IP version you will enter the IP, then type the
except IP address range. Click Add to save your changes. The IP address will be entered into the
Exception List, and excluded from the URL filtering rules in effect.
126

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top