NetModule NB3711, User Manual

Page: 84 / 214

NB3711 User Manual 4.0
5.5. FIREWALL
5.5.1. Administration
NetModule routers use Linux’s netfilter/iptables firewall framework (see
http://www.
netfilter.org
for more information) which supports stateful inspection, that is, grant-
ing the same permissions for inherited connections within an IP session (e.g. FTP which
builds up a control and data connection).
The administration page can be used to enable and disable firewalling. When turning it
on, a shortcut can be used to generate a predefined set of rules which allow administration
(over HTTP, HTTPS, SSH or TELNET) by default but block any other packets coming
from the WAN interface.
5.5.2. Adress/Port Groups
This menu can be used to form address or port groups which can be later used for
firewall rules in order to reduce the number of rules. If address or port groups have been
referenced, packets will match if one of the configured entities apply to the packet.
Figure 5.24.: Firewall Groups
84