Geneko GWR High Speed Router Series, Руководство пользователя

Страница: 125 / 133

User Manual
Geneko GWR High Speed Router Series
125
Firstly firewall should be enabled, that is done by selecting:
Firewall General Settings>Enable
Firewall can be configured by enabling or editing existing, predefined rules or by adding new one.
Firewall is configured in following way:
1. Telnet traffic is denied
Select predefined rule number 3. Configuration page like on picture below is shown.
Figure 131 – Filtering of Telnet traffic
ENABLE option should be selected to have this rule active. To deny Telnet traffic POLICY should be changed
from ACCEPT to REJECT (ICMP error message type can be selected when policy reject is selected). After that SAVE
button should be pressed and user is returned to main configuration page.
2. ICMP traffic is denied from all IP addresses except 212.62.38.196
New rule should be added by selecting ADD NEW RULE button. Policy should be configured in following way:
-
Rule name: Deny PING to ppp_0 interface
-
Enable: selected
-
Chain: INPUT
- Service: Custom
-
Protocol: ICMP
-
ICMP-Type: echo-request
- Input interface: ppp_0
-
Source address: Single IP ; 212.62.38.196
-
Inverted source address rule logic: selected
-
Destination address: Any
-
Packet state: NEW
-
Policy: REJECT
-
Reject-with: icmp-port-unreachable
Configuration should be like on the picture below.