Draytek Vigor 2200V, Руководство пользователя

Страница: 61 / 143

Firewall Setup
6-12
> : Specify the port number is larger than the Start Port (includes the
Start Port ).
< : Specify the port number is less than the Start Port (includes the
Start Port ).
Keep State : i.e. Stateful Packet Inspection. It tracks packets and
denies unsolicited incoming data. On the protocol entry, you can
choose TCP or UDP or TCP/UDP or ICMP.
Fragments: Specify a fragmented packets action.
Don’t care Specify no fragment options in the filter rule.
Unfragmented Apply the rule to unfragmented packets.
Fragmented Apply the rule to fragmented packets.
Too Short Apply the rule only to packets which are too short to contain a
complete header.
An Example of Restricting Unauthorized Internet Services
This section will show a simple example to restrict someone from accessing
WWW services. In this example, we assume the IP address of the
access-restricted user is 192.168.1.10. The filter rule is created in the Data