NetModule NB3000-Line-Hd, Руководство пользователя

Страница: 100 / 225

NB3000-Line-Hd User Manual 4.2
5.5. FIREWALL
5.5.1. Administration
NetModule routers use Linux’s netfilter/iptables firewall framework
(see
http://www.netfilter.org
for more information) which supports stateful inspection,
that is, granting the same permissions for inherited connections within an IP session (e.g.
FTP which builds up a control and data connection).
The administration page can be used to enable and disable firewalling. When turning it on, a
shortcut can be used to generate a predefined set of rules which allow administration (over
HTTP, HTTPS, SSH or TELNET) by default but block any other packets coming from the WAN
interface.
5.5.2. Adress/Port Groups
This menu can be used to form address or port groups which can be later used for firewall
rules in order to reduce the number of rules. If address or port groups have been refer-
enced, packets will match if one of the configured entities apply to the packet.
Figure 5.24.: Firewall Groups
91