WBMR-G54 Wireless ADSL Router User Guide

Bridge Filters

Bridge filters are used to block or allow various types of packets through the WAN interface. This may be done for

security or to improve network efficiency. The rules are configured for individual devices based on MAC address. Filter

rules can be set up for source, destination or both. You can set up filter rules and disable the entire set of rules without

loosing the rules that have been configured.

Bridge Filters window

To add a bridge filter rule, check

Enable Bridge Filters

, type in a Source MAC, a Destination MAC or both in the

entry fields, you may opt to limit filtering to only the Ethernet, and click the

Apply

button. To remove a bridge filter

from the table in the bottom half of the window, click the corresponding

trashcan icon. Remember to save the

configuration changes.

The protocols that may be specifically allowed or denied to pass through the WAN interface are the following:

IPv4,

IPv6, RARP, PPPoE Discovery

and

PPPoE Session.

66

Downloaded from

www.Manualslib.com

manuals search engine

WBMR-G54 Wireless ADSL Router User Guide

Routing

Use Static Routing to specify a route used for data traffic within your Ethernet LAN or to route data on the WAN. This

is used to specify that all packets destined for a particular network or subnet use a predetermined gateway.

Routing Table window

To add a static route to a specific destination IP on the local network, enter a

Destination

IP address,

Netmask

, then

click the

Gateway

radio button and type in the Gateway’s IP address. Click

Apply

to enter the new static route in the

table below. The route becomes active immediately upon creation.

To add a static route to a specific destination IP on the WAN, click the Connection radio button and choose a

connection from the pull-down menu, then enter a

Destination

IP address and

Netmask

. Click

Apply

to enter the new

static route in the table below. The route becomes active immediately upon creation

To remove a static route from the table in the bottom half of the window, choose to Delete it from the table and click the

Apply

button. Remember to save the configuration changes.

67

Downloaded from

www.Manualslib.com

manuals search engine

WBMR-G54 Wireless ADSL Router User Guide

DMZ

Since some applications are not compatible with NAT, the Router supports use of a DMZ IP address for a single host on

the LAN. This IP address is not protected by NAT and will therefore be visible to agents on the Internet with the right

type of software. Keep in mind that any client PC in the DMZ will be exposed to various types of security risks. If you

use the DMZ, take measures (such as client-based virus protection) to protect the remaining client PCs on your LAN

from possible contamination through the DMZ.

DMZ window

To designate a DMZ IP address, select the

Enabled

radio button, type in the

IP Address

of the server or device on your

LAN, and click the

Apply

button. To remove DMZ status from the designated IP address, select the Disabled radio

button and click Apply. It will be necessary to save the settings and reboot the Router before the DMZ is activated.

68

Downloaded from

www.Manualslib.com

manuals search engine

WBMR-G54 Wireless ADSL Router User Guide

Firewall

The

Firewall Configuration

window allows the

Router to enforce specific predefined policies

intended to protect against certain common types

of attacks. There are two general types of

protection (DoS, Port Scan) that can be enabled

on the Router, as well as filtering for specific

packet types sometimes used by hackers.

You can choose to

enable or disable protection

against a customized basket of attack and scan

types. To use

DoS Protection

or

Port Scan

Protection

, select the

State

Enabled radio button

for the protection type and click in the selection

boxes for the various types of protection listed

under each.

Note

Service Filtering may

interfere with other

configurations such as

DHCP Relay or

Remote Management

via Telnet.

Firewall Configuration window

When DoS, Port Scan, or Service Filtering Protection is enabled, it will create a firewall policy to protect your network

against the following:

69

Downloaded from

www.Manualslib.com

manuals search engine

WBMR-G54 Wireless ADSL Router User Guide

Dos Protection

Port Scan Protection

Service Filtering

•

SYN Flood check

•

ICMP Redirection check

•

FIN/URG/PSH attack

•

Xmas Tree Scan

•

Null Scan attack

•

SYN/RST attack

•

SYN/FIN Scan

•

Ping from WAN

•

Telnet from WAN

•

FTP from WAN

•

DNS from WAN

•

IKE from WAN

•

RIP from WAN

•

DHCP from WAN

•

ICMP from LAN

A DoS "denial-of-service" attack is characterized by an explicit attempt by attackers to prevent legitimate users of a

service from using that service. Examples include: attempts to "flood" a network, thereby preventing legitimate network

traffic, attempts to disrupt connections between two machines, thereby preventing access to a service, attempts to

prevent a particular individual from accessing a service, or, attempts to disrupt service to a specific system or person.

Port scan protection is designed to block attempts to discover vulnerable ports or services that might be exploited in an

attack from the WAN.

The Service Filtering options allow you to block FTP, Telnet response, Pings, etc, from the external network. Check the

category you want to block to enable filtering of that type of packet.

When you have selected the desired Firewall policies, click the

Apply

button to enforce the policies. Remember to save

any configuration changes.

70

Downloaded from

www.Manualslib.com

manuals search engine