Page 156 / 285 Scroll up to view Page 151 - 155
12-10
Firewall
12.6 Services
Click on the
Service
tab. The screen appears as shown next. Use this screen to enable service blocking,
enter/delete/modify the services you want to block and the date/time you want to block them.
Figure 12-6 Firewall Service
Page 157 / 285
Firewall
12-11
Table 12-3 Firewall Service
FIELD
DESCRIPTION
Enable Services
Blocking
Select this check box to enable this feature.
Available Service
This is a list of pre-defined services (ports) you may prohibit your LAN
computers from using. Select the port you want to block using the drop-down
list and click
Add
to add the port to the
Blocked Service
field.
Blocked Service
This is a list of services (ports) that will be inaccessible to computers on your
LAN once you enable service blocking. Choose the IP port (
TCP
,
UDP
or
TCP
/
UDP
) that defines your customized port from the drop down list box.
Custom Port
A custom port is a service that is not available in the pre-defined
Available
Services
list and you must define using the next two fields.
Type
Services are either
TCP
and/or
UDP
. Select from either
TCP
or
UDP
.
Port Number
Enter the port number range that defines the service. For example, suppose
you want to define the Gnutella service. Select TCP type and enter a port
range from 6345-6349.
Add
Select a service from the
Available Services
drop-down list and then click
Add
to add a service to the Blocked Service.
Delete
Select a service from the
Blocked Services List
and then click
Delete
to
remove this service from the list.
Clear All
Click
Clear All
to empty the
Blocked Service
.
Date to Block
Select everyday or the day(s) of the week to activate blocking.
Time of Day to Block
(24-Hour Format)
Select the time of day you want service blocking to take effect. Configure
blocking to take effect all day by selecting the
All Day
check box. You can
also configure specific times that by entering the start time in the
Start (hr)
and
Start (min)
fields and the end time in the
End (hr)
and
End (min)
fields.
Enter times in 24-hour format, for example, "3:00pm" should be entered as
"15:00".
To save your changes to the Prestige, click
Apply
.
To reconfigure all the fields in this screen, click
Reset
.
Page 158 / 285
Page 159 / 285
Prestige 324 Intelligent Broadband Sharing Gateway
Filter Configuration
13-1
Chapter 13
Filter Configuration
This chapter shows you how to create and apply filter(s).
13.1 About Filtering
Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There
are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and
protocol filters, which are discussed later.
Data filtering screens the data to determine if the packet should be allowed to pass. Data filters are divided
into incoming and outgoing filters, depending on the direction of the packet relative to a port. Data filtering
can be applied on either the WAN side or the Ethernet side. Call filtering is used to determine if a packet
should be allowed to trigger a call. Remote node call filtering is only applicable when using
PPTP or
PPPoE
encapsulation (
see
Error! Reference source not found.
).
Outgoing packets must undergo data
filtering before they encounter call filtering as shown in the following figure.
Page 160 / 285
13-2
Filter Configuration
Figure 13-1 Outgoing Packet Filtering Process
For incoming packets, your Prestige applies data filters only. Packets are processed depending upon
whether a match is found. The following sections describe how to configure filter sets
13.1.1 The Filter Structure of the Prestige
A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the rules for
NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve
filter sets with six rules in each set, for a total of 72 filter rules in the system. You cannot
mix device filter
rules and protocol filter rules within the same set. You can apply up to four filter sets to a particular port to
block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24
rules active for a single port.
The following diagram illustrates the logic flow when executing a filter rule.
Data Filtering
Outgoing
Packet
Drop
packet
Built-in
default
Call Filters
User-defined
Call Filters
(if applicable)
Initiate call
if line not up
Active Data
Send packet
and reset
Idle Timer
Or
Or
Drop packet
if line not up
Drop packet
if line not up
Send packet
but do not reset
Idle Timer
Send packet
but do not reset
Idle Timer
Match
Match
Match
No
match
No
match
No
match
Call Filtering

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top