SnapGear LITE, Руководство пользователя

Страница: 63 / 95

Firewall
59
This is useful for restricting external access to the SnapGear VPN Router's services (such as telnet
on port 23) to trusted external IP addresses only. Note that the options specified in the
Administration Services section for disabling web or telnet access on the Internet interface have
lower priority than any rules that you specify for web or telnet access here.
Port Forwarding
Figure 6.3 Port Forwarding Configuration
Port forwarding allows the SnapGear VPN Router to control access to services provided by
machines on your private network from users on the Internet. Requests coming into the SnapGear
VPN Router on the specified
Incoming Port(s) will be forwarded to the Target Port on the Target
Server .
Outgoing Access
Your SnapGear VPN router can be configured to restrict certain network traffic going out the
Internet interface. These restrictions can either be applied to specific hosts or networks (defined by
IP address), or globally across all hosts on your internal local area network (LAN). Outgoing Access
restrictions are applied by denying a group of services (for example: web and email) from specific
hosts or networks or globally across all hosts.