Contemporary Controls CTRLink EIAR-10T, Руководство пользователя, Страница: 46 / 78

Configuration
4-44
Host filter
Certain computers may be granted access specifically to other networks
(white list) or else, conversely, it is possible to prohibit some computers
access to other networks (black list). In this case, the packet filter will
merely pass packets of the specified computers or else it will block
precisely these.
If no computer is to be prohibited communication via the router, define
an empty black list. This is also the default configuration.
4.3.1.11 Menu option "Firewall - Trusted Nets"
By using this configuration menu, the disabling of routing for certain
ports (see below) and the black/white list can be disabled for certain
networks. Here you can specify subnets which are trusted.
A typical example is the routing of NetBios ports (Windows enables)
between two LANs which are assigned data via two network cards of
the Linux fli4l router. In this case, all trusted networks must be specified.
In this conjunction, contrary to the masked or routed networks, all
networks must be specified between which packets are to be
forwarded. Therefore, at least two networks must be specified to ensure
that correct firewall rules can be generated.