PLANET ADSL VPN / Firewall Router
36
3.6.3.4.2 Packet Filter
When you click
Packet Filter
, you get the following figure.
You may configure to filter inbound (incoming) and outbound (outgoing) packets based
on port or IP address.
If it is based on port, click Port Filters for more options. You may filter the packets based
on PORT and packet type (TCP or UDP or any). For example, the protocol number 1
means ICMP. You may enter 1 to protocol number of Raw IP Filtering web page. Port
ranges are supported.
If it is based on IP address, click Address Filters for more options. You may enter the IP
address and again to select the inbound or outbound packets.
For example, to allow TCP packet, port 0 to 1000 passing router between WAN and
LAN and blocks host IP address, 192.168.1.100. Then you have to configure the port
filter
à
add TCP filter > 0 to 1000 and ALLOW in both direction. Then click address filter
à
add address filter
à
enter host IP 192.168.1.100, subnet mask 255.255.255.255 (for
this single host) and both direction.
3.6.3.4.2.1 Port Filters
The pre-defined port filter rules for high, medium and low security level are listed below.
When user enables Firewall Security feature for high, medium or low security level, the
Block WAN Request function (Ping packet) is enabled automatically.
Port Number
Firewall - High
Firewall - Medium
Firewall - Low
Application
Protocol
Start
End
Inbound
Outbound
Inbound Outbound Inbound
Outbound
HTTP(80)
TCP(6)
80
80
NO
YES
NO
YES
NO
YES
DNS (53)
UDP(17) 53
53
NO
YES
NO
YES
YES
YES
DNS (53)
TCP(6)
53
53
NO
YES
NO
YES
YES
YES
FTP(21)
TCP(6)
21
21
NO
NO
NO
YES
NO
YES
Telnet(23)
TCP(6)
23
23
NO
NO
NO
YES
NO
YES
SMTP(25)
TCP(6)
25
25
NO
YES
NO
YES
NO
YES
POP3(110)
TCP(6)
110
110
NO
YES
NO
YES
NO
YES