MC Technologies GmbH
16
1.6.2 Firewall
The MCT router includes a Stateful Packet Inspection Firewall.
The firewall can be turned on or off (see "Network Security Setup" menu point "Firewall.") The firewall is active by
default and blocks incoming data traffic. Outgoing data traffic is still possible.
The firewall rules are applied from up to down.
Firewall
Incoming Traffic
Protocol
TCP, UDP, ICMP, all
From IP
0.0.0.0/0 means all IP addresses. To enter an address range, use CIDR notation.
To IP
From Port
(only with TCP and UDP) You have the following options:
To Port
1.
Direct port input
Example: From Port = 20, To Port = 30.
2.
Any
Examples: From Port or To Port = Any (Any means absolutely any port).
3.
Port range
Example: From Port or To Port = 80-90 (all ports from 80-90).
Action
Accept:
Pass data packets.
Reject:
Data packets are rejected.
Drop:
Data packets may not pass, the sender does not receive notification.
Log
Logging firewall rules.
Yes:
Event is logged.
No:
Event is not logged (default).
New
A new firewall rule is added below the last rule.
Delete:
The rule is deleted.
Outgoing Traffic
Lists the installed firewall regulations. They apply for outgoing data connections that were internally
initiated to communicate with a remote destination device.
Factory settings: The factory settings include a rule allowing all outgoing connections.
Note:
If no rule is set, all outgoing connections are blocked (except VPN).
Protocol
TCP, UDP, ICMP, all
From IP
0.0.0.0/0 means all IP addresses. To enter an address range, use CIDR notation.
From Port
(Only evaluated for TCP and UDP logs.) You have the following options:
To Port
1.
Direct port input
Example: From Port = 20, To Port = 30.
2.
Any
Examples: From Port or To Port = Any (Any means absolutely any port).
3.
Port range
Example: From Port or To Port = 80-90 (all ports from 80-90).
Action
Accept:
Pass data packets.
Reject:
Data packets are rejected.
Drop:
Data packets may not pass, the sender does not receive notification. Logging of firewall rules.
Log
Yes:
Event is logged.
No:
Event is not logged (default).
New
A new firewall rule is added below the last rule.
Delete:
The rule is deleted.