Appendix B: Helps
This section takes you to different Help Sections for Firewall, Bridge Filters, LAN Clients and PPP
Connection.
1.
Firewall:
Help for Port Forwarding, Access Control, and Advanced Security.
NAT and Firewall service (Section 4.3.3 : LAN Setup - Firewall/NAT Services)
The DSL Router uses Network Address Translation (NAT) and Stateful Packet Inspection (SPI)
Firewall to protect your home network. The NAT and Firewall Service can be globally (for LAN and
all WAN connections) disabled/enabled from the Setup Firewall/NAT Service page. If disabled no
NAT functionality nor firewall protection can be provided. For each WAN connection (e.g. the
Internet connection) NAT and Firewall (SPI) can be enabled/disabled. With Firewall (SPI) enabled
on a WAN connection all incoming packets are examined by the Stateful Packet Inspection engine
and traffic is dropped if it is not matching an existing connection opened from LAN side or a port
forwarding rule. Connections from LAN side to the Internet are trusted and allowed to pass thru the
router unless explicit IP Filter rules are used to block the LAN traffic. This Asymmetric Permissive
Firewall setup (drop from WAN, allow from LAN) provides easy to use Internet access while
protecting the home network.
Port Forwarding (Section 4.4.5 : ADVANCED - Port Forwarding)
Using the Port Forwarding page, you can provide local services (for example web hosting) for
people on the Internet or play Internet games. To configure a service, game or other application
select the external connection (for example the Internet connection), select the computer hosting
the service and add the corresponding firewall rule. If you want to add a custom application, select
the User category, click New and fill in the port, protocols and description for your application. You
can also add/edit/delete rules without using the pre-defined Firewall Policy Database (games,
services, etc.). Click on
Custom Rules
to access this type of interface. In the presence of the
firewall, anonymous Internet traffic is blocked.
IP Filters (Section 4.4.6 : ADVANCED - IP Filters)
This firewall feature allows you to block network access based on a user's computer IP address.
You can use this page to block specific traffic (for example block web access) or any traffic from a
computer on your local network. To configure an IP Filter rule select the computers' IP address and
add the corresponding firewall traffic definition from the Firewall Policy Database. If the traffic type
is set to "Any" all network traffic from that computer will be blocked. You can also add/edit/delete IP
FIlter rules without using the pre-defined Firewall Policy Database (games, services, etc.). Click on
"Custom Rules" to access this type of interface.
4 Ports ADSL2/2+ Router
104
