Wireless ADSL Modem User’s Manual
88
•
Port Range:
Selecting this will enable you to select a range of Ports to
which the policy will apply. The first Port in the range must be entered in the
first Port entry field and the last Port in the range must be entered in the
second Port entry field.
•
Safe Ports:
Any port greater than 1024 (1025 – 65535) is considered a safe
port.
Dest Port:
This specifies the Destination Port for the Inbound Policy. This is the
internal (LAN side, behind the firewall) Port that will be affected by the policy. See
Src Port
above for configuration detail.
Transport Protocol:
This specifies the Transport/Transfer protocol for the policy.
The following protocol options are available: All, TCP, UDP, ICMP, AH, ESP, and
GRE.
Filtering Action:
This specifies what action the policy takes:
•
Allow:
Selecting this will cause the policy to allow packet transfer from the
Src IP
through the
Src Port
to travel through the
Dest Port
to the
Dest IP
. All
of these are specified above and must be configured by the user.
•
Deny:
Selecting this will cause the policy to deny packet transfer from the
Src
IP
through the
Src Port
to travel through the
Dest Port
to the
Dest IP
. All
ofthese are specified above and must be configured by the user.
Time Window Filtering:
This field allows you to select a certain time frame from
the
Time Group
in which this policy will be active. See section 6.6 for more
information on Time Groups.
DB:
Short for Database, this field allows you to select a user-defined IP Group for
the
Src IP
and
Dest IP
fields and a user-defined Service Group for the
Dest Port
.
Userdefined IP and Service Groups are created in
IP Group
and
Service Group
pages, sections 6.4 and 6.5, respectively, in this user guide.
Note: Source and Destination IP Addresses, Subnet Masks, and Ports are
reversed between Inbound Policy and Outbound Policy. For Inbound Policy, the
source is on the WAN side and the destination is on the LAN side. For Outbound
policy, the source is on the LAN side and the destination is on the LAN side.
