Fanvil FH-S01, Руководство пользователя

Страница: 57 / 63

52
Table 19 - Web Firewall
parameter Description
Enable Input Rules whether enable Input Rules
Enable Output Rules Whether enable Output Rules
input/output Select the current rule as an input or output rule
Deny/permit Choose the current rule is deny or allowed;
protocol There are four types of protocols
：
TCP
，
UDP
，
ICMP
，
IP
。
Port range Port range
Src Address
The source address can be the host address, network address, or
all addresses 0.0.0.0; it can also be a network address similar to
*.*.*.0, such as 192.168.1.0.
Dst Mask
The destination address can be a specific IP address or all
addresses 0.0.0.0; it can also be a network address similar to
*.*.*.0, such as 192.168.1.0.
Src Port Range
It is the source address mask. When it is configured as
255.255.255.255, it means it is a specific host. When it is set as a
subnet mask of type 255.255.255.0, it means that the filter is a
network segment;
Dst Port Range
It is the destination address mask. When it is configured as
255.255.255.255, it means it is a specific host. When it is set as a
subnet mask of 255.255.255.0 type, it means that a network
segment is filtered;
源端口范围
目的端口范围
After setting, click [Add], a new item will be added to the firewall output rules, as shown in the
figure below:
picture 44 - Firewall rules list
Then select and click the button [Submit].
In this way, when the device runs: ping 192.168.1.118, it will not be able to send data packets to
192.168.1.118 because of the prohibition of the output rule. But ping other IPs in the
192.168.1.0 network segment can still receive the response packets from the destination host
normally.