UsingtheRouter’sWebInterface 23
8. IntheSourcePortfield,typetheportthatistheoriginofthetraffic.TypeANYifthesourceportdoes
notmatter.
9. FromtheActiondrop‐downlist,selecttheactiontoperformonthetraffic.Youcanallowthetrafficto
beaccepted,rejected,loggedordroppe
d.Ac
ceptedpacketsareallowedtocontinuethroughthe
firewall.Droppedpacketsareremovedandnofurtherprocessingisperformedonthem.Rejected
packetsaredropped,andanerrormessageissenttothesourceofthepacket.Loggedpacketsare
loggedtothesystem'smainlogfilewiththerule'snamepr
epended
asanidentifier(viewablefromthe
Statisticspage).Logrulesdonotaffectthepacket'sfate.
10. TheDirectionislockedtoOUTGOINGwhileusingtheOutboundTrafficwizard.
11. FromtheProtocoldrop‐downlist,selecttheprotocolofthetrafficthatisbeingfiltered.
AdvancedSettings
TheFirewall'sAdvancedSettingsmodeallowsuserstomanipulateDNAT,SNAT,andFilterrulesdirectly.DNAT
rulescanmanipulatethedestinationaddressandportofapacket;similarlySNATrulescanmanipulatethe
sourceaddressandportofapacket.
FilterrulesapplyanACCEPT,REJECT,DROP,orLOGactiontoapack
et.DN
AT,SNAT,andFilterrulescanbe
associatediftheyarenamedthesame.ThisassociationisrecognizedwithinthePortForwardingand
OutboundTrafficwizardsaccessedfromtheNormalSettingsmode,andallowstheassociatedrulestobe
viewedandeditedasaseries.
Settingupstaticroutes
TosetupamanuallyconfiguredmappingofanIPaddresstoanext‐hopdestinationfordatapackets:
1. FromFirewall,selectStaticRoutes.
2. Inthepanethatappears,clickAddRoute.
3. IntheNamefield,typethenameoftheroute.
4. IntheAddressfield,typetheremotenetwo
r
kIPaddressoftheremotelocation.
5. IntheMaskfield,typethenetworkmaskthatisassignedontheremotelocation.
6. IntheGatewayfield,typetheIPaddressoftheroutingdevicethatsupportstheremoteIPNetwork.
7. ClickFinish.