Wireless Cable Voice Gateway Model CVG834G Reference Manual

Protecting Your Network

3-5

v2.0, November 2007

Domain Blocking

To enable domain blocking:

1.

Select the

Enable

radio box adjacent to Domain Blocking.

2.

Enter the Domain Name of the site name you want to block in the

Domain List

field.

If the domain “badstuff.com” is specified, the URL “http://www.badstuff.com/xxx.html” will

be blocked, along with all other URLs in the badstuff.com site.

Up to eight entries are supported in the

Domain List

.

3.

When you have completed your entries, click

Add Domain

.

4.

Click

Apply

to save your settings

To delete a an entry in either the Keyword List or Domain List field:

1.

Select it from the list, and click

Remove Keyword

or click

Remove Domain

.

2.

Click

Apply

to save your settings.

Blocking Access by Time of Day

The default blocking schedule is to block access all day. However, you can also block access

according to a daily schedule for each PC individually.

To block access for a PC:

1.

In the MAC Filtering screen, select the PC for which the schedule will be modified.

2.

In the Day(s) to Block section, select the check boxes next to the days when you want access

blocked.

3.

In the Time of Day to Block section, select either

All Day

, or set the hours for Internet

blocking

4.

Click

Apply

to activate the settings.

Enabling or Disabling Content Filtering Services

You can use the Services screen to disable or enable certain gateway features.

Wireless Cable Voice Gateway Model CVG834G Reference Manual

3-6

Protecting Your Network

v2.0, November 2007

From the main menu, select Services. The Services screen appears:

Selecting the check box for a service enables it. Clearing the check box disables the corresponding

service. If you make changes, then you must click

Apply

in order for the changes to take effect.

The services are described as follows:

•

Firewall Features

.

Enabled by default. The gateway will perform stateful packet inspection

(SPI) and protect against Denial of Service (DoS) attacks. .

•

VPN Pass-Through

. Enabled by default. IPSec and PPTP traffic will be forwarded. When it is

disabled, this traffic will be blocked.

•

Multicast.

Enabled by default. The gateway can pass multicasting streams through the

firewall.

•

Web Features

. Disabled by default. If enabled, certain Web-oriented features such as cookies,

java scripts, or pop-up windows will be blocked by the firewall. For example, if you enable

Filter Cookies

, many websites will not allow you to access their site.

Using MAC Filtering to Block Access

By default, any computer has access to the Internet through your gateway. MAC Filtering allows

you to block access to the Internet to any computer on your LAN based on the hardware MAC

address of its Ethernet or wireless adapter.

Figure 3-5

Wireless Cable Voice Gateway Model CVG834G Reference Manual

Protecting Your Network

3-7

v2.0, November 2007

To configure MAC Filtering:

1.

Log in to the gateway at its default LAN address by entering

, the default

user name

admin

, and default password of

password

; or use whatever password and LAN

address you have chosen for the gateway.

2.

Under the Advanced heading on the main menu, select MAC Filtering. The MAC Filtering

screen appears:

The Trusted Devices table is at the top of this screen. It shows devices that are currently connected

to the wireless voice gateway.

To add a device to the Trusted Devices table:

1.

Select a device using one of the following methods:

•

If the device is in the Trusted Devices table, click the radio button of that PC to capture is

MAC address.

•

If the device is not in the Trusted Devices table, you can manually enter the MAC address

of the PC you want to block. If no Device Name appears when you enter its MAC address,

you can type a descriptive name in the

Device Name

field.

2.

Click

Add

. The device appears in the Trusted Devices table.

Figure 3-6

Wireless Cable Voice Gateway Model CVG834G Reference Manual

3-8

Protecting Your Network

v2.0, November 2007

To delete a device from the Trusted Devices table:

1.

Select the MAC address of the PC from the Trusted Devices table.

2.

Click

Delete

to delete the entry.

3.

Click

Apply

to activate the settings.

Inbound and Outbound Rules

You can use firewall rules to block or allow specific traffic passing through from one side to the

other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively

allowing only specific outside users to access specific resources. Outbound rules (LAN to WAN)

determine what outside resources local users can have access to.

A firewall has two default rules, one for inbound traffic and one for outbound. The default rules of

the gateway are:

•

Inbound:

Block all access from outside except responses to requests from the LAN side.

Instructions for setting up inbound rules can be found in

“Port Forwarding” on page 3-10

•

Outbound:

Allow all access from the LAN side to the outside. Use Port Blocking to set up

outbound rules (see

“Enabling or Disabling Content Filtering Services” on page 3-5

).

You may define more rules that specify exceptions to the default rules. By adding custom rules,

you can block or allow access based on the service or application, source or destination IP

addresses, and time of day.

Port Blocking

You can use Port Blocking to block outbound traffic on specific ports.

Wireless Cable Voice Gateway Model CVG834G Reference Manual

Protecting Your Network

3-9

v2.0, November 2007

To configure port blocking:

1.

Under the Advanced heading on the main menu, select Port Blocking. The Port Blocking

screen displays.

2.

Select the service that you want to block from the

Add Predefined Services

drop-down list. If

the service that you want to block is not in the predefined list, you can add a custom service.

3.

Enter the range of ports that you want to block and select whether the ports are TCP, UDP or

Both.

4.

Enter the Local IP Address for the computer to which this rule will apply.

5.

Click

Add

. The selected service will appear in the Port Filter List

Blocking a Rule by Day or Time

To specify specific days or times to block a rule:.

1.

From the

Port Filter List

, select a rule, and then select the corresponding

Enable

check box.

2.

Select the check box for the

Day(s) to Block

when you want to apply the rule.

3.

For the time of day, either select the

All Day

check box or specify a

Start Time

and

End Time

from the pull-down menus.

Figure 3-7