ZyXEL Communications ZyWALL 10, Руководство пользователя

Страница: 114 / 254

ZyWALL 10 Internet Security Gateway
7-18 Filters
Figure 7-16 Filtering LAN Traffic
7.6.2 Remote Node Filters
Go to Menu 11.5 (shown below – note that call filter sets are only present for PPPoE encapsulation) and
enter the number(s) of the filter set(s) as appropriate. You can cascade up to four filter sets by entering their
numbers separated by commas. The factory default filter set, NetBIOS_WAN, can be applied in Menu 11.5
to block local NetBIOS traffic from triggering calls to the ISP (when you are using
PPPoE or PPTP
encapsulation only). Enter “1” in the protocol filters field under Call Filter Sets when using PPPoE
encapsulation and in protocol filters under Output Filter Sets – protocol filters when using Ethernet
encapsulation . Filter set “3”, TEL_FTP_WEB_WAN, blocks telnet, FTP and web connections from the
WAN Port to help prevent security breaches. Apply them as shown in the following figure.
Figure 7-17 Filtering Remote Node Traffic
Menu 3.1 – LAN Port Filter Setup
Input Filter Sets:
protocol filters= 2
device filters=
Output Filter Sets:
Protocol filters=
device filters=
Press ENTER to Confirm or ESC to Cancel:
Apply
Default Filter
2 here.
Menu 11.5 - Remote Node Filter
Input Filter Sets:
protocol filters= 3
device filters=
Output Filter Sets:
protocol filters= 1
device filters=
Call Filter Sets:
protocol filters= 1
device filters
=
Enter here to CONFIRM or ESC to CANCEL:
Apply Default
Filters 1 and 3
here. Enter 1 in
protocol filters
under Output
Filter Sets when
using Ethernet
encapsulation
and under
Call
Filter Sets when
using PPPoE or
PPTP
Encapsulation
.