NETGEAR DGFV338 - ProSafe Wireless ADSL Modem VPN Firewall Router, Справочное руководство

Страница: 83 / 227

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual
Security and Firewall Protection 4-7
v1.0, May 2008
.
Inbound Rules (Port Forwarding)
Because the DGFV338 uses Network Address Translation (NAT), your network presents only one
IP address to the Internet and outside users cannot directly address any of your local computers.
However, by defining an inbound rule you can make a local server (for example, a Web server or
game server) visible and available to the Internet. The rule tells the firewall to direct inbound
traffic for a particular service to one local server. If you enable Translate to a Port Number, the
traffic will be forwarded to a specific port based on the destination port number. This is also
known as port forwarding.
This following lists all the existing rules for incoming traffic. Remember that allowing inbound
services opens holes in your firewall. Only enable those ports that are necessary for your network.
An inbound rule is defined by the following fields:
Figure 4-4
Table 0-1. Inbound Rules
Item Description
Service Select the desired Service or application to be covered by this rule. If the desired
service or application does not appear in the list, you must define it using the
Services menu (see
“Customized Services” on page 4-16 ).
Action (Filter) Select the desired action for packets covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
Note : Any inbound traffic which is not allowed by rules you create will be blocked by
the Default rule.