User Guide Appendix
APconnections, Inc. // 303.997.1300 // www.netequalizer.com
Page 92 of 96
All rights reserved
Copyright © 2014, 2015 APconnections, Inc.
rev. 20150309
Appendix 7 - Firewalling the NetEqualizer
This appendix is for customers that need to install the NetEqualizer outside of their firewall,
on the public side of their Internet pipe.
Firewall rules are provided to prohibit unauthorized users from accessing the NetEqualizer IP
and thus SSH access and the NetEqualizer Web GUI screen.
WARNING:
The firewall rules can lock you out from the unit if you give it the wrong rule or
do not know what you are doing. Be sure that you have access to the unit's console before
testing rules if you are unsure. At the console you could login and clear firewall rules
typically with:
iptables -F
or if using ebtables,
ebtables -F
at the command prompt and
clear most rules a user would be testing.
Review Firewall Samples
The Firewall Samples (listed below) and available via the GUI, should be viewed before
setting up a Firewall on your NetEqualizer.
From the Management and Reporting Menu,
Click on ->
Manage Firewall Settings
->
[
Sample Firewall Rules
]
->
[
Show Rules
].
Note: The NetEqualizer has a bridging firewall installed so the FORWARD table is used for
rules affecting things going "through" the unit. INPUT and OUTPUT tables are used to
protect the unit itself.
Sample file
Description
firewallprotectneteq.txt
How to protect the NetEqualizer unit from
unauthorized access.
howtodroppacketsfromthisorthat.txt
How to drop packets by IP or PORT or MAC address
going through the NetEqualizer.
redirectfw.txt
A sample of how to create a capture portal using
IPtables and the macs.allow file.
To set up the NetEqualizer Firewall:
From the Management and Reporting Menu,
Click on ->
Manage Firewall Settings
->
[
Configure Firewall
]
->
[
Edit Firewall Rules File
]
-
>
[
Edit
].
Put in the rules that you need, by copying and pasting from the Firewall Samples and then
modifying for your environment.
Click on ->
[
Post Changes
]
to save or
[
Reset
]
to cancel.
To view NetEqualizer Firewall Settings:
From the Management and Reporting Menu,
Click on ->
Manage Firewall Settings
->
[
View Firewall Settings
].
To start or stop the NetEqualizer Firewall:
After you have configured your Firewall, or made changes to it, you will need to start/restart
it. From the Management and Reporting Menu,
Click on ->
Manage Firewall Settings
->
[
Start/Stop Firewall
]
. Then
Click on -> [
Start/Restart Firewall
]
to start.
If you decide for any reason to stop your firewall,
Click on ->
[
Stop Firewall
]
to stop.
