36

|

Chapter 2.

Wireless Network Configuration

Mobile Broadband 11n Wireless Router MBR1210 User Manual

SIM Card Modem Unlock Code

If you have a SIM card that is not provided by the company where you got the router, you

might get an error indicating the modem is locked. To proceed, you must enter an unlock

code.

To enter the modem unlock code:

1.

Log into the router and select

Mobile Broadband Settings

from the navigation tab.

2.

Enter the Modem Unlock Code.

The modem unlock code can be obtained from the company that supplied the router.

Modem

Unlock

Code

Chapter 3.

Content Filtering

|

37

3

3.

Content Filtering

This chapter describes how to use the basic firewall features of the router to protect your

network.

•

Viewing, Selecting, and Saving Logged Information

•

Blocking Sites and Keywords

•

Blocking Services

•

Scheduling

•

Enabling Security Event Email Notification

Note:

For information about the advanced content filtering features port

forwarding and port triggering, see

Port Forwarding and Port

Triggering

on page

65.

38

|

Chapter 3.

Content Filtering

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Viewing, Selecting, and Saving Logged Information

The router logs security-related events such as denied incoming service requests, hacker

probes, and administrator logins. If you enabled content filtering in the Block Sites screen, the

Logs screen can show you when someone on your network tries to access a blocked site.

On the main menu, under Content Filtering, select Logs to display this screen:

Figure 1.

Note:

You can enable email notification to receive these logs in an email

message. See

Enabling Security Event Email Notification

on

page

46.

Chapter 3.

Content Filtering

|

39

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Log entries and action buttons are described in the

Table 7

.

Table 1.

Field or Button

Description

Current time

The date and time the log entry was recorded.

Description or action

The type of event and what action was taken, if any.

Source IP

The IP address of the initiating device for this log entry.

Source port and interface

The service port number of the initiating device, and whether it

originated from the LAN or WAN.

Destination

The name or IP address of the destination device or website.

Destination port and interface

The service port number of the destination device, and whether it is

on the LAN or WAN.

Refresh button

Refresh the log screen.

Clear Log button

Clear the log entries.

Send Log button

Email the log immediately.

Apply button

Apply the current settings.

Cancel button

Clear the current settings.

Selecting Which Information to Log

Besides the standard information listed previously, you can choose to log additional

information. Those optional selections are as follows:

•

Attempted access to blocked site

•

Connections to the router menu

•

Router operation (start up, get time, and so on)

•

Known DoS attacks and port scans

Saving Log Files on a Server

You can choose to write the logs to a computer running a syslog program. To activate this

feature, select to the

Broadcast on LAN

radio button, or enter the IP address of the server

where the syslog file will be written.

40

|

Chapter 3.

Content Filtering

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Log Message Examples

Following are examples of log messages. In all cases, the log entry shows the time stamp as

Day, Year-Month-Date

Hour:Minute:Second.

Activation and Administration

Tue, 2002-05-21 18:48:39 - NETGEAR activated

This entry indicates a power-up or reboot with initial time entry.

Tue, 2002-05-21 18:55:00 - Administrator login successful - IP:192.168.0.2

Thu, 2002-05-21 18:56:58 - Administrator logout - IP:192.168.0.2

This entry shows an administrator logging in to and out from IP address 192.168.0.2.

Tue, 2002-05-21 19:00:06 - Login screen timed out - IP:192.168.0.2

This entry shows a time-out of the administrator login.

Wed, 2002-05-22 22:00:19 - Log emailed

This entry shows when the log was emailed.

Dropped Packets

Wed, 2002-05-22 07:15:15 - TCP packet dropped - Source:64.12.47.28,4787,WAN -

Destination:134.177.0.11,21,LAN - [Inbound Default rule match]

Sun, 2002-05-22 12:50:33 - UDP packet dropped - Source:64.12.47.28,10714,WAN -

Destination:134.177.0.11,6970,LAN - [Inbound Default rule match]

Sun, 2002-05-22 21:02:53 - ICMP packet dropped - Source:64.12.47.28,0,WAN -

Destination:134.177.0.11,0,LAN - [Inbound Default rule match]

These entries show an inbound FTP (port 21) packet, User Datagram Protocol (UDP) packet

(port 6970), and Internet Control Message Protocol (ICMP) packet (port 0) being dropped as

a result of the default inbound rule, which states that all inbound packets are denied.