Functions
MLR 3G 2.0
10.4.6
Creating or Deleting a Firewall Rule
The MLR 3G 2.0 provides a firewall for dial-out connections. A firewall is used to prevent
unauthorized data traffic. The logic of the firewall states that any data traffic is forbid-
den, which is not explicitly permitted through a rule.
Define which connections will be permitted by the MLR 3G 2.0. If you enable the firewall
for the connection type "Dial-Out", only connections will be possible which are author-
ised by the firewall rules. All other connections will be blocked.
Configuration with the web interface
In order to
enable the firewall for dial-out connections
, check in the menu
"Dial-Out" on the page "Firewall" the checkbox "Activate firewall for Dial-Out
connections".
In order to
create a rule for a permitted IP connection
, proceed as follows.
Select in the menu "Dial-Out" on the page "Firewall" the
data direction
in the
drop-down menu "Data direction".
Define the
protocol of the permitted connection
in the drop-down menu "Pro-
tocol".
Enter the further specifications of the connections permitted by the MLR 3G
2.0 into the entry fields "
Source IP address
", "
Destination IP address
" and "
Des-
tination port
". Only rules can be created, which are not valid for individual
machines (hosts), but for whole networks. In this case, the net mask must be
entered following the "/".
Save your settings
by clicking "OK".
In order to
disable individual firewall rules temporarily
, uncheck in the menu
"Dial-Out" on the page "Firewall" the checkbox in the column "active" in the
firewall rule overview. Click on "OK" to confirm the settings.
In order to
delete one or more rules
, check the checkbox in the column "de-
lete" in the firewall rule overview. Click on "OK" to confirm the settings.
10.4.7
Creating a Port Forwarding Rule
When including the Internet as communication network, private and public IPs are dis-
tinguished. To be able to access the private IP addresses from the Internet, which are
mostly used in local networks, the technologies NAT and port forwarding are used. Only
the public IP address of the MLR 3G 2.0 can be reached in the Internet. This IP address can
still be used to access the local end terminals in the network of the MLR 3G 2.0 from the
Internet, if NAT and port forwarding are used.
The MLR 3G 2.0 provides port forwarding. The MLR 3G 2.0 routes incoming packets from
outside of the network to certain computers within the network. Outgoing packets of
these connections from the network are being routed back to their destinations outside
of the network. At certain ports, the MLR 3G 2.0 routes incoming data packets to one
port of a certain destination address. You can use rules to define which packets from
outside are routed to which addresses and ports in the network. This means that you can
make certain services available to computers in the network, using the phone network.
46
