Planet VIP-320, User Manual

Page: 35 / 51

LAN-to-WAN Access Rules: You can define LAN-to-WAN network access rules which evaluate the
network traffic's source IP address, destination IP address, and communication port to decide if it's
allowed to pass through the firewall.
WAN-to-LAN Access Rules: You can define WAN-to-LAN network access rules which evaluate the
network traffic's source IP address, destination IP address, and communication port to decide if it's
allowed to pass through the firewall.
LAN to WAN Access Rules
This pages allows you to define LAN-to-WAN network access rules which evaluate the network traffic's
source IP address, destination IP address, and communication port to decide if it's allowed to pass
through the firewall.
By default, the stateful packet inspection module of this router allows all communications to the Internet
that originates from the LAN. The behavior is defined by the default stateful packet inspection enabled
in the router:
Forward all sessions originating from the LAN to the Internet.
Discard all sessions originating from the Internet to the LAN (Pleaes refer to the “WAN-to-LAN
Access Rules” at System Setup Firewall WAN-to-LAN Access Rules ).
Additional access rules may be defined to extend or overwrite the default rules.
The ability to define network access rules is a very
powerful management tool. Using a custom rule, it's
possible to disable all firewall protection, creating
holes in the firewall, or block all access to the
Internet. Use with extreme caution when creating or
deleting network access rules.
Network access rules will not disable protection from
Denial of Service (DoS) attacks, such as SYN Flood, Ping
of Death, Port Scan, etc. However, it's possible to
create vulnerabilities to attacks that exploit
vulnerabilities in applications.
Í
Note
35