Firewall
268
8.3
The BAT Firewall
BAT54-Rail/F..
Release
7.54
06/08
The BAT offers now the possibility to reject ident inquiries only by mail and
news servers, and to discard those of all other PCs. For this, the ident inquir-
ies of the respective servers are rejected for a short time (20 seconds) when
a mail (SMTP, POP3 IMAP2) or a news server (NNTP) is calling up.
When the timeout is exceeded, the port will be hidden again.
8.3.4 Parameters of Firewall rules
In this section we describe the components of Firewall rules and the available
options to set up the different parameters.
Note: Information regarding definition of Firewall rules with the different kinds
of configuration tools (LANconfig, WEBconfig or Telnet) can be found in
chapter ’Configuration of Firewall rules’ → page 285.
U Components of a Firewall rule
A Firewall rule is at first defined by its name and some further options:
D On/Off switch: Is the rule active for the Firewall?
D Priority: Which is the priority of the rule? (→ Page 268)
D Observe further rules: Should further Firewall rules be observed when
this rule applies to a data packet? (→ Page 269)
D Create VPN rule: Is this Firewall rule also used to create a VPN rule?
(→ Page 269)
D Routing Tag: When applying the routing tag further information about for
instance the used service or protocol can be used for selecting the target
route. With this so called policy based routing a much better control of the
routing behaviour is possible (’Policy-based routing’ → page 358).
U Priority
When setting up the filter list of the Firewall rules, the BAT will automatically
sort the entries. Thereby the “grade of detail“ will be considered: All specified
rules are observed at first, after that the general ones (e. g. Deny All).
If after the automatic sorting the desired behavior of the Firewall does not turn
out, it is possible to change the priority manually. The higher the priority of
the Firewall rule, the earlier it will be placed in the according filter list.
Note: For complex rule types please check the filter list as described in sec-
tion ’Firewall diagnosis’ → page 295.
To Next Page
Loading...
Need help?
General
