NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall Router, Справочное руководство

Страница: 77 / 227

4-1
v1.0, May 2008
Chapter 4
Security and Firewall Protection
This chapter describes how to use the Security features of the ProSafe Wireless ADSL Modem
VPN Firewall Router to protect your network. These features can be found by selecting
Security
from the main menu of the browser interface.
This chapter includes the following sections:
• “Firewall Protection and Content Filtering Overview” on page 4-1
• “Using Rules to Block or Allow Specific Kinds of Traffic” on page 4-2
• “Blocking Internet Sites” on page 4-21
• “Configuring Source MAC Filtering” on page 4-24
• “Configuring IP/MAC Address Binding Alerts” on page 4-25
• “Configuring Port Triggering” on page 4-27
• “Enabling Universal Plug and Play (UPnP)” on page 4-29
• “Setting a Schedule for Firewall Rules” on page 4-31
• “Configuring a Bandwidth Profile” on page 4-32
• “Configuring Session Limits” on page 4-34
• “Event Logs and Alerts” on page 4-35
• “Security and Administrator Management” on page 4-38
Firewall Protection and Content Filtering Overview
A firewall is a special category of router that protects one network (the “trusted” network, such as
your LAN) from another (the untrusted network, such as the Internet), while allowing
communication between the two.
A firewall incorporates the functions of a NAT (Network Address Translation) router, while
adding features for dealing with a hacker intrusion or attack, and for controlling the types of traffic
that can flow between the two networks. Unlike simple Internet sharing NAT routers, a firewall
uses a process called stateful packet inspection to protect your network from attacks and
intrusions. NAT performs a very limited stateful inspection in that it considers whether the
incoming packet is in response to an outgoing request, but true Stateful Packet Inspection goes far
beyond NAT.