INSYS MoRoS GPRS 2.1 PRO, Руководство пользователя

Страница: 67 / 144

MoRoS GPRS 2.1 PRO Functions
12.5.8 Creating or Deleting a Firewall Rule
The MoRoS GPRS 2.1 PRO offers a firewall for all connections via the LAN ext inter-
face. A firewall is used to prevent unauthorized data traffic. The logic of the firewall
states that any data traffic is forbidden, which is not explicitly permitted through a
rule. If you enable the firewall, only the connections are possible, which are permit-
ted by the firewall rules. All other connections will be blocked.
Configuration with the web interface
In order to enable the firewall, check in the menu "LAN (ext)" on the page
"Firewall" the checkbox "Activate firewall for LAN (ext) interface".
Select in the menu "LAN (ext)" on the page "Firewall" the data direction in
the drop-down list "Data direction".
Define the protocol of the permitted connection in the drop-down list
"Protocol".
Enter the further specifications of the connections permitted by the Mo-
RoS GPRS 2.1 PRO into the entry fields "Source IP address", "Destination
IP address" and "Destination port". Only rules can be created, which are
not valid for individual machines (hosts), but for whole networks. In this
case, the net mask must be entered following the "/". You can leave single
fields open to create rules, which apply to several packets.
Save your settings by clicking "OK".
In order to disable individual firewall rules temporarily, uncheck in the
menu "LAN (ext)" on the page "Firewall" the checkbox in the column "ac-
tive" in the firewall rule overview. Click on "OK" to confirm the settings.
In order to delete one or more rules, check in the menu "LAN (ext)" on the
page "Firewall" the checkbox in the column "delete" in the firewall rule
overview. Click on "OK" to confirm the settings.
12.5.9 Creating or Deleting a Port Forwarding Rule
If port forwarding is enabled, the router forwards packets coming in from the WAN
to the machines in the LAN, which have been specified in the port forwarding rules.
Only the WAN IP address of the MoRoS GPRS 2.1 PRO is accessible from the WAN,
if the MoRoS GPRS 2.1 PRO has enabled NAT for packets going into the WAN. The
local terminal devices in the network of the MoRoS GPRS 2.1 PRO can still be ac-
cessed with this IP address using port forwarding. Packets from the WAN sent to
the WAN IP address at a port x, can be forwarded to a machine with the IP address
Y at the port y.
Configuration via the web interface
In order to enable port forwarding, check in the menu "LAN (ext)" on the
page "Port forwarding" the checkbox "Activate port forwarding for LAN
67