Wireless Modem Router User Guide

- 51 -

_________________________________________________________________________________________________

Warning!

DMZ servers pose a security risk. A computer designated as the DMZ server loses much of the protection of the firewall

and is exposed to exploits from the Internet.

_________________________________________________________________________________________________

4.2.5 Security

This section explains the following information:

•

IP Filtering

•

MAC Filtering

IP Filtering

Outgoing IP Filtering Setup

By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be

BLOCKED

by setting up filters.

Choose Add or Remove to configure outgoing IP filters.

Choose

Add

to enter the following screen:

Wireless Modem Router User Guide

- 52 -

This screen allows you to create a filter rule to identify outgoing IP traffic by specifying a new filter name and at least

one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click

'Apply/Save' to save and activate the filter.



Filter Name:

Enter a descriptive filtering name.



IP Version:

Select either IPv4 or IPv6.



Protocol:

TCP/UDP, TCP, UDP and ICMP are available for your option.



Source IP address [/prefix length]:

Enter the LAN IP address to be filtered.



Source Port (port or port: port):

Specify a port number or a range of ports used by LAN PCs to access Internet. If

you are unsure, leave it blank.



Destination IP address [/prefix length]:

Specify the external network IP address to be accessed by specified LAN

PCs.



Destination Port

(port or port:port)

:

Specify a port number or a range of ports used by LAN PCs to access external

network.

Incoming IP Filtering Setup

When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is BLOCKED. However, some IP

traffic can be

ACCEPTED

by setting up filters.

Choose Add or Remove to configure incoming IP filters.

Click

Add

to enter the following screen:

Wireless Modem Router User Guide

- 53 -

This screen allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at least

one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click

Apply/Save

to save and activate the filter.



IP Version:

Select either IPv4 or IPv6.



Protocol:

TCP/UDP, TCP, UDP and ICMP are available for your option.



Source IP address [/prefix length]:

Enter the Internal IP address [/prefix length]

to be filtered.



Source Port (port or port: port):

Specify a port number or a range of ports used by PCs from external network to

access your internal network.



Destination IP address [/prefix length]:

Specify the internal network IP address [/prefix length]

to be accessed by

the specified PCs from external network.



Destination Port

(port or port:port)

:

Specify a port number or a range of ports used by PCs from external network

to access your internal network.

MAC Filtering

A bridge WAN service is needed to configure this service.

MAC Filtering is only effective on ATM PVCs configured in Bridge mode.

FORWARDED

means that all MAC layer

frames will be FORWARDED except those matching with any of the specified rules in the following table.

BLOCKED

means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the

following table.

Choose Add or Remove to configure MAC filtering rules.

_________________________________________________________________________________________________

Warning!

Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED

AUTOMATICALLY! You will need to create new rules for the new policy.

_________________________________________________________________________________________________

Wireless Modem Router User Guide

- 54 -

Click

Add

to enter the following screen:

Here you can create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple

conditions are specified, all of them take effect. Click

Save/Apply

to save and activate the filter.

Protocol Type:

Select a protocol type from the drop-down list.

Destination MAC Address:

Enter the destination MAC address apply the MAC filtering rule to which you wish to

apply the MAC filtering rule.

Source MAC Address:

Enter the source MAC address to which you wish to apply the MAC filtering rule.

Frame Direction:

Select a frame direction from the drop-down list.

WAN Interfaces:

Select a WAN interface from the drop-down list.

4.2.6 Parental Control

This section explains the following information:

•

Time Restriction

•

URL Filter

Time Restriction

Click

Parental Control -> Time Restriction -> Add

to enter the following screen.

Here you can add time of day restriction that an attached LAN device can access Internet.

The 'Browser's MAC Address' automatically displays the MAC address of the LAN device where the browser is running.

To restrict other LAN device, click the "Other MAC Address" button and enter the MAC address of the other LAN

device.



User Name:

Enter a user name.



Browser's MAC Address:

Automatically adds the MAC address of the attached LAN device where the browser is

Wireless Modem Router User Guide

- 55 -

running.



Other MAC Address:

Specify the MAC address of the computer that you want to apply Internet access restriction.



Days of the week:

Click to select the days of the week during which you wish to restrict Internet access.



Start Blocking Time/ End Blocking Time:

Specify time of day restriction to an attached LAN device. Within this

specified time length of the day, this LAN device will be blocked from Internet.



Apply/Save:

Click to

Apply/Save your settings.

URL Filter

Here you can add URL access restriction to specific LAN PCs.

Select the

URL List Type

(Exclude or Include) first and then click

Add

to enter the screen below for configuring the list

entries. Maximum 100 entries can be configured.

URL Address:

Enter the URLs that a specific LAN PC cannot access.

Port Number:

Specify the port number used by the web server. The default is 80, which is the standard protocol for web

servers.

Enter the URL address and port number then click "Apply/Save" to add the entry to the URL filter.