Firewall
66
Administration services
The following figure shows the Administration Services page:
Figure 6-1
By default the SnapGear appliance runs a web administration server and a telnet service.
Access to these services can be restricted to specific interfaces. For example, you may
want to restrict access to the
SnapGear Management Console
web administration pages
(
Web Admin
) to machines on your local network. Disallowing all services is not
recommended, as this will make future configuration changes impossible unless your
SnapGear appliance is reset to the factory default settings.
You can also select to accept ICMP messages on the Internet port. For example, if you
disallow echo requests (the default for increased security), your SnapGear appliance will
not respond to pings on its Internet port. Destination unreachable ICMP messages are
always accepted.