3-1

v1.0, July 2009

Chapter 3

Content Filtering

This chapter describes how to use content filtering s for the gateway. This chapter includes:

•

“Viewing or E-mailing Logs

”

•

“Blocking Keywords, Sites, and Services” on page 3-2

•

“Services” on page 3-4

•

“Port Forwarding” on page 3-5

Viewing or E-mailing Logs

Your gateway logs security-related events such as Denial of Service (DoS) attacks, hacker probes,

and administrator logins, according to your settings on this screen. If you have set up content

filtering on the Block Sites screen, you can also log when someone on your network tried to access

a blocked site. You can specify which events are logged and you can send the logs to a Syslog

server.

1.

Log in to the gateway as described in

“Logging In to Your Gateway” on page 1-4

.

2.

In the main menu, under Content Filtering, select

Logs

. The Logs screen displays.

Figure 3-1

Wireless Cable Voice Gateway CG3000/CG3100 User Manual

3-2

Content Filtering

v1.0, July 2009

To e-mail logs:

1.

Fill in the

Contact Email Address

and

SMTP Server Name

fields.

2.

Select the

Enable

check box for

E-mail Alerts

.

3.

Click

Apply

so that your changes take effect.

4.

To e-mail the log now, click

E-mail Log.

To delete all log entries, click

Clear Log

. To see the most recent entries, click

Refresh

.

Blocking Keywords, Sites, and Services

The gateway provides a variety of options for blocking Internet based content and communications

services. With its content filtering feature, the gateway prevents objectionable content from

reaching your PCs. The gateway allows you to control access to Internet content by screening for

keywords within Web addresses. It also has the capability to block access to all sites except those

that are explicitly allowed.

Key content filtering options include:

•

Blocking access from your LAN to Internet locations that contain keywords that your specify.

•

Blocking access to websites that you specify as off-limits.

•

Allowing access to only websites that you specify as allowed.

Blocking Keywords and Domains

The gateway allows you to restrict access to Internet content based on functions such as Web

address keywords and Web domains. A domain name is the name of a particular website. For

example, for the address www.NETGEAR.com, the domain name is NETGEAR.com.

To block keywords and domains:

1.

Log in to the gateway as described in

“Logging In to Your Gateway” on page 1-4

.

Wireless Cable Voice Gateway CG3000/CG3100 User Manual

Content Filtering

3-3

v1.0, July 2009

2.

In the main menu, under Content Filtering, select Block Sites. The Block Sites screen displays.

Figure 3-2

3.

To use keyword blocking, select the

Keyword Blocking Enable

check box. You can enter up

to eight keywords. After you have entered a keyword in the field to the left of the Add

Keyword button, click

Add Keyword

. The keyword will be shown in the Keyword List.

Note the following:

•

If the keyword

XXX

is specified, the URL www.zzzyyqq.com/xxx.html is blocked.

•

If the keyword

.com

is specified, only websites with other domain suffixes (such as .edu,

.org, or .gov) can be viewed.

•

Enter the keyword “

.

” to block all Internet browsing access.

To remove a keyword from the Keyword List, select the keyword, and then click

Remove

Keyword

.

4.

You can use the Domain List to create a list of allowed domains, or to create a list of denied

domains. To use domain blocking, select the

Domain Blocking Enable

check box. After you

have entered a domain in the field to the left of the Add Domain button, click

Add Domain

.

The domain will be shown in the Domain List.

Wireless Cable Voice Gateway CG3000/CG3100 User Manual

3-4

Content Filtering

v1.0, July 2009

If the domain www.zzzyyqq.com is specified, the URL <http://www.zzzyyqq.com/xxx.html>

is blocked, along with all other URLs in the www.zzzyyqq.com site.

To remove a domain from the Domain List, select the domain, and then click

Remove

Domain

.

5.

Click

Apply

to save your settings.

Services

You can use the Services screen to disable certain gateway features.

1.

Log in to the gateway as described in

“Logging In to Your Gateway” on page 1-4

.

2.

In the main menu, under Content Filtering, select Services.

Figure 3-3

To disable a feature, clear its check box and then click

Apply

•

Firewall Features

. The gateway performs Stateful Packet Inspection (SPI) and protect against

Denial of Service (DoS) attacks.

•

IPSec Pass-Through

. IPSec traffic is forwarded. If you clear this check box then this traffic

will be blocked.

Wireless Cable Voice Gateway CG3000/CG3100 User Manual

Content Filtering

3-5

v1.0, July 2009

•

PPTP Pass-Through

. PPTP traffic is forwarded. If you clear this check box then this traffic

will be blocked.

•

Multicast

. The gateway can pass multicasting streams through the firewall.

•

Port Scan Detection

. When enabled, the gateway can respond to Internet-based port scans.

•

IP Flood Detection

. Allows the is gateway to block malicious devices that are attempting to

flood devices.

•

You can use the Web Features to set certain Web-oriented cookies, java scripts, and pop-up

windows to be blocked by the firewall.

Port Forwarding

Configuring Port Forwarding to Local Servers

Using the port forwarding feature, you can allow certain types of incoming traffic to reach servers

on your local network. For example, you might make a local Web server, FTP server, or game

server visible and available to the Internet.

Use the Port Forwarding screen to configure the router to forward specific incoming protocols to

computers on your local network. In addition to servers for specific applications, you can also

specify a default DMZ server to which all other incoming protocols are forwarded. The DMZ

server is configured in the WAN Setup screen, as discussed in

““Setting Up a Default DMZ

Server” on page 5-4

.

Before starting, you need to determine which type of service, application, or game you will

provide, and the local IP address of the computer that will provide the service. Be sure the

computer’s IP address never changes.

To configure port forwarding to a local server:

1.

Log in to the gateway as described in

“Logging In to Your Gateway” on page 1-4

.

2.

Select Port Forwarding under Advanced in the main menu. The Port Forwarding screen

displays: