MBR L13
–
User’s
Guide
35
3.7.1
Firewall
The L13 gateway security suite includes security services: State-full Packet Inspection Firewall, user-authentication
protocols, and password protection mechanisms. These features together allow users to connect their computers to
the Internet and simultaneously be protected from the security threats of the Internet. The firewall, the cornerstone
of your gateway's security suite, has been tailored to the needs of the residential/office user and has been pre-
configured to secure your LAN.
Figure 36: L13 Firewall in Action
L13 secures the use of interactive applications, such as Internet gaming and video-conferencing.
Additional features, including Web site restrictions and access control, can also be configured locally by the user
through the L13 WBM or remotely by a service provider. The L13 firewall supports advanced filtering, which is
designed to allow control over the firewall's behavior. You can define specific input and output rules, control the order
of logically similar sets of rules and make a distinction between rules that apply to WAN and LAN network devices.
The Firewall service includes the following management screens:
An Overview screen allowing you to choose the security level for the firewall (refer to section
3.7.1.1).
An Access Control screen that can be used to restrict access from the home network to the Internet (refer to
section
3.7.1.2).
A Port Forwarding screen that can be used to enable access from the Internet to specified services provided by
computers in the home network and special Internet applications (refer to section
3.7.1.3).
A Gaming screen that can be used to earmark one computer on the local network for gaming (refer to section 3.7.1.4).
A DMZ Host screen that allows you to configure a LAN host to receive all traffic arriving at your gateway that does not
belong to a known session (refer to section
3.7.1.5).
A Port triggering screen that allows you to define port triggering entries and dynamically open the firewall for some
protocols or ports (refer to section
3.7.1.6).
A Website Restrictions screen that allows you to block LAN access to a certain host or Web site on the Internet (refer
to section
3.7.1.7).
The NAT screen allows you to manually control the translation of network addresses and ports (refer to
section
3.7.1.8).
The Connections screen allows you to view all the connections that are currently open (refer to section
3.7.1.9).
The Advanced Filtering screen allows you to implicitly control the firewall setting and rules (refer to section
3.7.1.10).
3.7.1.1
Overview
The firewall regulates the flow of data between the local network and the Internet. Both incoming and outgoing data
are inspected and then either accepted (allowed to pass through the L13) or rejected (barred from passing through
19216811.live