Draytek VIGOR2820 series, Руководство пользователя, Страница: 86 / 269

Vigor2820 Series User’s Guide 78
Session timeout –Setting timeout for sessions can make the best
utilization of network resources. However, Queue timeout is
configured for TCP protocol only; session timeout is configured
for the data flow which matched with the firewall rule.
Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to
transfer game data. Instinctively as a secure firewall, Vigor router will reject these
fragmented packets to prevent attack unless you enable “
Accept Incoming Fragmented
UDP Packets ”. By checking this box, you can play these kinds of on-line games. If security
concern is in higher priority, you cannot enable “ Accept Incoming Fragmented UDP
Packets ”.
3
3
.
.
4
4
.
.
3
3
F
F
i
i
l
l
t
t
e
e
r
r
S
S
e
e
t
t
u
u
p
p
Click Firewall and click Filter Setup to open the setup page.
To edit or add a filter, click on the set number to edit the individual set. The following page
will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit
each rule. Check
Active to enable the rule.
Filter Rule Click a button numbered (1 ~ 7) to edit the filter rule. Click the
button will open Edit Filter Rule web page. For the detailed
information, refer to the following page.
Active Enable or disable the filter rule.
Comment Enter filter set comments/description. Maximum length is
23–character long.
Move Up/Down Use Up or Down link to move the order of the filter rules.
Next Filter Set Set the link to the next filter set to be executed after the current
filter run. Do not make a loop with many filter sets.