NetModule NB3720, Руководство пользователя

Страница: 93 / 202

NB3720
User Manual for NRSW version 4.4
5.5. FIREWALL
5.5.1. Administration
NetModule routers use Linux’s netfilter/iptables firewall framework
(see
http://www.netfilter.org
for more information) which supports stateful inspection, that is,
granting the same permissions for inherited connections within an IP session (e.g. FTP which builds
up a control and data connection).
The administration page can be used to enable and disable firewalling. When turning it on, a shortcut
can be used to generate a predefined set of rules which allow administration (over HTTP, HTTPS, SSH
or TELNET) by default but block any other packets coming from the WAN interface.
5.5.2. Adress/Port Groups
This menu can be used to form address or port groups which can be later used for firewall rules in
order to reduce the number of rules. If address or port groups have been referenced, packets will
match if one of the configured entities apply to the packet.
Address Groups Port Groups
NetModule Router Simulator
Hostname NB1600
Software Version 4.4.0.103
© 2004-2020, NetModule AG
Firewall
Administration
Address / Port Groups
Filtering Rules
NAPT
Masquerading
Inbound Rules
Outbound Rules
Firewall Address Groups
Description Addresses
LAN1 Subnet 192.168.1.0/24
HOME INTERFACES ROUTING FIREWALL VPN SERVICES SYSTEM
LOGOUT
Figure 5.24.: Firewall Groups
93