Page 56 / 97
Scroll up to view Page 51 - 55
±
FIREWALL
The Broadband router provides extensive firewall protection by restricting connection
parameters, thus limiting the risk of hacker attacks, and defending against a wide
array of common Internet attacks. However, for applications that require unrestricted
access to the Internet, you can configure a specific client/server as a Demilitarized
Zone (DMZ).
Note:
To enable the Firewall settings select Enable and click Apply
- Advanced
You can allow the VPN packets to pass through this Broadband router.
56
Page 57 / 97
- Demilitarized Zone (DMZ)
If you have a client PC that cannot run an Internet application (e.g. Games)
properly behind the NAT firewall, then you can open up the firewall restrictions to
unrestricted two-way Internet access by defining a DMZ Host. The DMZ function
allows you to re-direct all packets going to your WAN port IP address to a
particular IP address in your LAN. The difference between the virtual server and
the DMZ function is that the virtual server re-directs a particular service/Internet
application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ
re-directs all packets (regardless of services) from your WAN IP address to a
particular LAN client/server.
Enable DMZ:
Enable / Disable DMZ
LAN IP Address:
Fill-in the IP address of a particular host in your LAN Network
or select a PC from the list on the right that will receive all the
packets originally from the WAN port/Public IP address.
Click
<Apply>
at the bottom of the screen to save the above configurations.
-
Denial of Service (DoS)
57
Page 58 / 97
The Broadband router's firewall can block common hacker attacks, including Denial
of Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the
router can log the events.
Flood:
Protects the router from Sync Flood attack.
-
MAC Filter
If you want to restrict users from accessing certain Internet applications / services
(e.g. Internet websites, email, FTP etc.), and then this is the place to set that
configuration. MAC Filter allows users to define the traffic type permitted in your
LAN. You can control which PC client can have access to these services.
58
Page 59 / 97
Enable MAC Filtering:
Check to enable or disable MAC Filtering.
Deny:
If you select “
Deny
” then all clients will be allowed to access Internet
except the clients in the list below.
Allow:
If you select “
Allow
” then all clients will be denied to access Internet
except the PCs in the list below.
59
Page 60 / 97
Add PC MAC Address
Fill in “
LAN MAC Address
” and
<Description>
of the PC that is allowed /
denied to access the Internet, and then click
<Add>
. If you find any typo
before adding it and want to retype again, just click
<Reset>
and the fields
will be cleared.
Remove PC MAC Address
If you want to remove some PC from the "
MAC Filtering Table
", select the
PC you want to remove in the table and then click
<Delete Selected>
. If
you want to remove all PCs from the table, just click the
<Delete All>
button. If you want to clear the selection and re-select again, just click
<Reset>
.
Click
<Apply>
at the bottom of the screen to save the above configurations.
60
19216811.live