Firewall Settings

The router provides extensive firewall protection by restricting connection parameters,

thus limiting the risk of hacker attacks, and defending against a wide array of common

Internet attacks. However, for applications that require unrestricted access to the

Internet, you can configure a specific client/server as a Demilitarized Zone (DMZ).

Note

: To enable the Firewall settings select Enable and click

Apply

DMZ

If you have a client PC that cannot run an Internet application (e.g. Games) properly

from behind the NAT firewall, then you can open up the firewall restrictions to

unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows

you to re-direct all packets going to your WAN port IP address to a particular IP address

in your LAN. The difference between the virtual server and the DMZ function is that the

virtual server re-directs a particular service/Internet application (e.g. FTP, websites) to a

particular LAN client/server, whereas DMZ re-directs all packets (regardless of services)

going to your WAN IP address to a particular LAN client/server.



Enable DMZ

: Enable/disable DMZ



Public IP Address

: The IP address of the WAN port or any other Public IP

addresses given to you by your ISP



Client PC IP Address

: Fill-in the IP address of a particular host in your LAN that

will receive all the packets originally going to the WAN port/Public IP address

above.

Click

Apply

at the bottom of the screen to save the above configurations.

Denial of Service (DoS)

The Broadband router's firewall can block common hacker attacks, including Denial of

Service, Ping of Death, Port Scan and Sync Flood. If Internet attacks occur the router can

log the events.



Ping of Death

: Protection from Ping of Death attacks



Discard Ping From WAN

:

The router’s WAN port will not respond to any Ping

requests



Port Scan

: Protects the router from Port Scans.



Sync Flood

: Protects the router from Sync Flood attack.

Click

Apply

at the bottom of the screen to save the above configuration.

Access

You can restrict users from accessing certain Internet applications/services (e.g. Internet

websites, email, FTP etc.), Access Control allows users to define the traffic type

permitted in your LAN. You can control which PC client can have access to these services.



Deny

:

If you select “Deny” then all clients will be allowed to access Internet

accept for the clients in the list below.



Allow

:

If you select “Allow” then all clients will be denied to access Internet

accept for the PCs in the list below.



Filter client PCs by IP

:

Fill in “IP Filtering Table” to filter PC clients by IP.



Add PC

: You can click Add PC to add an access control rule for users by IP

addresses.



Remove PC

: If you want to remove some PCs from the "IP Filtering Table", select

the PC you want to remove in the table and then click “Delete Selected". If you

want to remove all PCs from the table, just click the "Delete All" button.



Filter client PC by MAC

:

Check “Enable MAC Filtering” to enable MAC Filtering.



Add PC

:

Fill in “Client PC MAC Address” and “Comment” of the PC that is allowed

to access the Internet, and then click “Add”. If you find any typo before adding it

and want to retype again, just click "Reset" and the fields will be cleared.



Remove PC

: If you want to remove some PC from the "MAC Filtering Table",

select the PC you want to remove in the table and then click "Delete Selected". If

you want to remove all PCs from the table, just click the "Delete All" button. If

you want to clear the selection and re-

select again, just click “Reset”.

Click

Apply

at the bottom of the screen to save the above configuration.

URL block

You can block access to some Web sites from particular PCs by entering a full URL

address or just keywords of the Web site.



Enable

: URL Blocking Enable/disable URL Blocking



Add URL/keyword

:

Fill in “URL/Keyword” and then click “Add”. You can enter

the full URL address or the keyword of the web site you want to block.



Remove URL/keyword

: If you want to remove some URL keywords from the

"Current URL Blocking Table", select the URL keyword you want to remove in the

table and then click "Delete Selected". If you want remove all URL keywords from

the table, just click "Delete All" button. If you want to clear the selection and re-

select again, just click “Reset”.

Click

Apply

at the bottom of the screen to save the above configuration.

Advanced Settings

Network Address Translation (NAT) allows multiple users at your local site to access the

Internet through a single Public IP Address or multiple Public IP Addresses. NAT provides

Firewall protection from hacker attacks and has the flexibility to allow you to map Private

IP Addresses to Public IP Addresses for key services such as Websites and FTP.

Select

Disable

to disable the NAT function.

Port Forwarding

Port Forwarding allows you to re-direct a particular range of service port numbers (from

the Internet/WAN Port) to a particular LAN IP address. It helps you to host servers

behind the router NAT firewall.