TELES ECOTEL, Руководство пользователя

Страница: 45 / 247

C O N F I G U R A T I O N F I L E S
C H A P T E R 5
45
ECOTEL 3G 16.1. Revised: 1 March 2011.
word
pwd
. The PAP authentication protocol is used. The default route occurs via DSL:
5 . 1 . 7 F I R E W A L L S E T T I N G S
The firewall settings provide options for limiting or denying access to and from the system. If you do not configure
this section, the firewall is inactive and access is unlimited.
WARNING : Make sure you configure the firewall rules carefully. The rules are processed from top to bottom. If
you use the option
quick
, you will break the sequence. We recomend that you put the most restrictive rule at the
end of the configuration.
Example: In the following example, only port 4445 allows incoming connections from the IP address
192.168.1.10. All others will be blocked.
[pppoe0]
PppoeIf=emac1
User=user
Pwd=pwd
AuthProto=pap
Route=0.0.0.0
[firewall]
fw=pass in quick on emac0 proto tcp from 192.168.1.10/32 to any port
eq 4445 flags S keepstate keep frags
fw=block in log quick on emac0 all
Table 5.6 Settings in the
[firewall]
Section of the
ip.cfg
[firewall]
fw=<mode> <direction> <list>
<mode> Two modes are possible for permitting or denying access::
pass
permits access
block
denies access
<direction> Possible directions are in and out:
in
external to internal
out
internal to external
<list> All other entries specify the other settings for the corresponding firewall rules and are
optional. The order in the line is as listed below:
log
Records non-matching packets.