Draytek VigorIPPBX 3510 Series, Руководство пользователя

Страница: 164 / 269

VigorIPPBX 3510 Series User’s Guide 156
Window size – It determines the size of TCP protocol
(0~65535). The more the value is, the better the performance
will be. However, if the network is not stable, small value will
be proper.
Session timeout –Setting timeout for sessions can make the best
utilization of network resources. However, Queue timeout is
configured for TCP protocol only; session timeout is configured
for the data flow which matched with the firewall rule.
Accept large incoming..
Some on-line games (for example: Half Life) will use lots of
fragmented UDP packets to transfer game data. Instinctively as
a secure firewall, Vigor router will reject these fragmented
packets to prevent attack unless you enable “
Accept large
incoming fragmented UDP or ICMP Packets ”. By checking
this box, you can play these kinds of on-line games. If security
concern is in higher priority, you cannot enable “
Accept large
incoming fragmented UDP or ICMP Packets ”.
Enable Strict Security
Firewall For the sake of security, you might want the router executing
strict security checking for data transmission. Check this box to
enable such function.
5
5
.
.
2
2
.
.
3
3
F
F
i
i
l
l
t
t
e
e
r
r
S
S
e
e
t
t
u
u
p
p
Click Firewall and click Filter Setup to open the setup page.
To edit or add a filter, click on the set number to edit the individual set. The following page
will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit
each rule. Check
Active to enable the rule.