Appendix B - Firewall
Stateful Packet Inspection
Refers to an architecture, where the firewall keeps track of packets on each
connection traversing all its interfaces and makes sure they are valid. This is in
contrast to static packet filtering which only examines a packet based on the
information in the packet header.
Denial of Service attack
Is an incident in which a user or organization is deprived of the services of a
resource they would normally expect to have. Various DoS attacks the router can
withstand are: ARP Attack, Ping Attack, Ping of Death, Land, SYN Attack, Smurf
Attack and Tear Drop.
TCP/IP/Port/Interface filtering rules
These rules help in the filtering of traffic at the Network layer i.e. Layer 3.
When a Routing interface is created "Enable Firewall" must be checked.
Navigate to Advanced Setup -> Security -> IP Filtering, web page.
Outgoing IP Filtering:
Helps in setting rules to DROP packets from the LAN
interface. By default if Firewall is Enabled all IP traffic from LAN is allowed. By
setting up one or more filters, particular packet types coming from the LAN can be
dropped.
Filter Name:
User defined Filter Name.
Protocol:
Can take on any values from: TCP/UDP, TCP, UDP or ICMP
Source IP Address/Source Subnet Mask:
Packets with the particular “Source IP
Address/Source Subnet Mask" combination will be dropped.
Source Port:
This can take on either a single port number or a range of port
numbers. Packets having a source port equal to this value or falling within the range
of port numbers (portX : portY) will be dropped.
Destination IP Address/Destination Subnet Mask:
Packets with the particular
"Destination IP Address/Destination Subnet Mask" combination will be dropped.
Destination Port:
This can take on either a single port number or a range
of port numbers. Packets having a destination port equal to this value or falling
within the range of port numbers (portX : portY) will be dropped.
Examples:
Filter
Name
:
Out_Filter1
Protocol
:
TCP
Source
Address
:
192.168.1.45
Source Subnet Mask : 255.255.255.0
Source
Port
:
80
Dest.
Address :
NA
Dest. Sub. Mask
: NA
Dest. Port
: NA
This filter will Drop all TCP packets coming from LAN with IP Address/Sub. Mask
192.168.1.45/24 having a source port of 80 irrespective of the destination. All other
115
Summary of Contents for CT-6373
Page 1: ...CT 6373 Wireless Multi DSL VoIP WLAN IAD User Manual Version A2 0 October 7 2009 261082 003...
Page 16: ...15...
Page 40: ...Front Panel LED Indicators 39...
Page 49: ...5 3 Route 5 4 ARP 48...
Page 50: ...5 5 DHCP 49...
Page 56: ...55...
Page 113: ...Step 7 Select driver file directory on CD ROM and click OK 112...
