Taicom V1103D, Руководство пользователя

Страница: 63 / 97

63
5.9.2 DMZ Host
- Gateway / Basic NAT Mode only -
The Demilitarized Zone (DMZ) function provides a way for public servers
(Web, e-mail, FTP, etc.) to be visible to the outside world (while still being
protected from DoS (Denial of Service) attacks such as SYN flooding and
Ping of Death). These public servers can also still be accessed from the
secure LAN.
By default the firewall allows traffic between the WAN and the DMZ, traffic
from the DMZ to the LAN is denied, and traffic from the LAN to the DMZ is
allowed. Internet users can have access to host servers configured in DMZ
Host list but no access to the LAN, unless special filter rules allowing access
were configured by the administrator or the user is an authorized remote user.
It is highly recommended that you keep all sensitive information off of the
public servers. Store sensitive information in computers on LAN.
If you would like to grant remote users the right to access one of your
computers on LAN to perform some actions such as Internet games, you must
enable the function of DMZ. When remote users access your legal IP(s),
Broadband Router will transmit these packets to the corresponding virtual
IP(s).