INSYS MoRoS GPRS 2.1 PRO, Руководство пользователя

Страница: 58 / 144

Functions MoRoS GPRS 2.1 PRO
12.4.6 Creating or Deleting a Firewall Rule
The MoRoS GPRS 2.1 PRO provides a firewall for dial-out connections. A firewall is
used to prevent unauthorized data traffic. The logic of the firewall states that any
data traffic is forbidden, which is not explicitly permitted through a rule.
Define which connections will be permitted by the MoRoS GPRS 2.1 PRO. If you
enable the firewall for the connection type "Dial-Out", only connections will be pos-
sible which are authorised by the firewall rules. All other connections will be
blocked.
Configuration with the web interface
In order to enable the firewall for dial-out connections, check in the menu
"Dial-Out" on the page "Firewall" the checkbox "Activate firewall for Dial-
Out connections".
In order to create a rule for a permitted IP connection, proceed as follows.
Select in the menu "Dial-Out" on the page "Firewall" the data direction in
the drop-down list "Data direction".
Define the protocol of the permitted connection in the drop-down list
"Protocol".
Enter the further specifications of the connections permitted by the Mo-
RoS GPRS 2.1 PRO into the entry fields "Source IP address", "Destination
IP address" and "Destination port". Only rules can be created, which are
not valid for individual machines (hosts), but for whole networks. In this
case, the net mask must be entered following the "/".
Save your settings by clicking "OK".
In order to disable individual firewall rules temporarily, uncheck in the
menu "Dial-Out" on the page "Firewall" the checkbox in the column "ac-
tive" in the firewall rule overview. Click on "OK" to confirm the settings.
In order to delete one or more rules, check the checkbox in the column
"delete" in the firewall rule overview. Click on "OK" to confirm the set-
tings.
12.4.7 Creating or Deleting a Port Forwarding Rule
If port forwarding is enabled, the router forwards packets coming in from the WAN
to the machines in the LAN, which have been specified in the port forwarding rules.
Only the WAN IP address of the MoRoS GPRS 2.1 PRO is accessible from the WAN,
if the MoRoS GPRS 2.1 PRO has enabled NAT for packets going into the WAN. The
local terminal devices in the network of the MoRoS GPRS 2.1 PRO can still be ac-
cessed with this IP address using port forwarding. Packets from the WAN sent to
the WAN IP address at a port x, can be forwarded to a machine with the IP address
Y at the port y.
58