XnetSolutions SX-GATE, Руководство пользователя

Страница: 308 / 480

14.2.2 Policies 308
DoS
If you like you can also activate the Denial-of-Service protection by the dynamic
firewall. For TCP the value refers to the maximum number of connections per
source IP. For all other protocols you specify the number of packets per source IP.
Comment
Use this field for documentation. Up to 14 characters from this field will be included
in the log if logging is enabled for this rule.
14.2.2-C Transp. proxy
Some SX-GATE services can act as a transparent proxy. This allows the use of the
proxy with all its benefits without having to reconfigure the clients. The checkboxes
on this screen will activate firewall rules to redirect certain connections to the
corresponding SX-GATE proxy.
Make sure that the respective proxy service is actually running.
These rules will apply to the connections of all clients connected to the selected
interface regardless of source or destination IP. To redirect connections only if specific
addresses are involved, you have to configure rules on tab "DNAT > *" instead.
As an example, the redirection to SX-GATE's web proxy will give you an idea which
firewall rules are associated with the respective switches. Let's assume SX-GATE's
IP address is 192.168.0.254. Connections to any destination's port 80 (HTTP) have
to be redirected to SX-GATE's web proxy on port 8080. The DNAT rule "HTTP:*->*-
>192.168.0.254(8080)" will do this.
port 80 (HTTP) to web proxy
This checkbox enables transparent access to SX-GATE's web proxy. Connections to
any destination's port 80 will be redirected to the local port 8082.
This option is not available if transparent proxying has been
disabled or user authentication has been enabled in the web
proxy configuration.
Transparent proxying of HTTP connections to non-standard
ports is not possible. Please configure the browser's proxy
settings instead.