Alcatel Speed Touch Wireless, User Manual

Page: 245 / 362

13 Networking Services - Firewalling
245 / 362
3EC 17766 AAAA TCZZA Ed. 01
NAPT is not applied on your local (W)LAN for this ADSL
connection. This means that the IP addresses are not hidden for
the remote side of the connection.
In the following table, the rules to apply are summarized:
Flow Source Dest. Prot. Source
port
Dest.
port
ACK
=1
Action
Out 10.0.0.0/8 200.20.20.1 TCP 1024Ć
65535
23 - accept
In 200.20.20.1 10.0.0.0/8 TCP 23 1024Ć
65535
Yes accept
Any External 10.0.0.0/8 Any Any Any - drop
For the STWireless Firewall, this will result in the following CLI
configuration:
1. A chain must be created, e.g. 'Telnet':
2. Following rules must be created for that chain:
D
For the outgoing Telnet service packets:
firewall rule create chain=Telnet src=10.0.0.0/8
dst=200.20.20.1 srcintfgrp=lan prot=tcp
srcport=1024 srcportend=65535 dstport=23
action=accept
D
For incoming Telnet service reply packets:
firewall rule create chain=Telnet src=200.20.20.1
dst=10.0.0.0/8 srcintfgrp=wan prot=tcp srcport=23
dstport=1024 dstportend=65535 ack=yes
action=accept
D
For blocking all other services:
firewall rule create chain=Telnet action=drop
3. The chain 'Telnet' must be assigned to the input hook: