RACOM M!DGE2, Руководство пользователя

Страница: 85 / 189

7.4. FIREWALL
This router uses Linux’s netfilter/iptables firewall framework (see http://www.netfilter.org for more in-
formation). It is set up of a range of rules which control each packet’s permission to pass the router.
Packets, not matching any of the rules, are allowed by default.
7.4.1. Firewall
Administration
The administration page can be used to enable and disable firewalling. When turning it on, a shortcut
can be used to generate a predefined set of rules which allow administration (over HTTP, HTTPS, SSH
or TELNET) by default but block any other packets coming from the WAN interface. Please note that
the specified rules are processed by order, that means, traversing the list from top to bottom until a
matching rule is found. If there is no matching rule found, the packet is allowed.
Administrative status: Enable or disable packet filtering.
Allow WAN administration: This option will predefine the rules for services on the WAN link as
follows (TCP ports 80, 443, 22 and 23):
Address / Port Groups
This menu can be used to form address or port groups which can be later used for firewall rules in order
to reduce the number of rules.
85 © RACOM s.r.o. – M!DGE2 GPRS/UMTS/HSPA+/LTE router
Web Configuration