Advantech EKI-6310GN, Руководство пользователя

Страница: 76 / 107

EKI-6310GN User Manual 66
Some applications may require multiple connections, such as Internet gaming, video
conferencing, and VoIP calls over the Internet. Enabling the firewall and anti-spoof
checking helps protect against attacks over the Internet in some cases.
Figure 8.1 Rules & Firewall
8.1 MAC/Port/IP Filtering
MAC/IP/Port filtering restricts connection parameters to limit the risk of intrusion and
defends against a wide array of common hacker attacks. MAC/IP/Port filtering allows
the unit to permit, deny or proxy traffic through its MAC addresses, IP addresses and
ports. EKI-6310GN allows you define a sequential list of permit or deny filtering rules.
This device tests ingress packets against the filter rules one by one. A packet will be
accepted as soon as it matches a permit rule, or dropped as soon as it matches a
deny rule. If no rules match, the packet is either accepted or dropped depending on
the default policy setting.
Figure 8.2 MAC/IP/Port Filter