Chapter 15 Firewall
AMG1302-T11C User’s Guide
177
network traffic against the firewall rules (in the order you list them). When the traffic matches a
rule, the AMG1302-T11C takes the action specified in the rule.
Firewall rules are grouped based on the direction of travel of packets to which they apply:
Note: The LAN includes both the LAN port and the WLAN.
By default, the AMG1302-T11C’s stateful packet inspection allows packets traveling in the following
directions:
•LAN to Router
These rules specify which computers on the LAN can manage the AMG1302-T11C (remote
management).
Note: You can also configure the remote management settings to allow only a specific
computer to manage the AMG1302-T11C.
•LAN to WAN
These rules specify which computers on the LAN can access which computers or services on the
WAN.
By default, the AMG1302-T11C’s stateful packet inspection drops packets traveling in the following
directions:
•WAN to LAN
These rules specify which computers on the WAN can access which computers or services on the
LAN.
Note: You also need to configure NAT port forwarding (or full featured NAT address
mapping rules) to allow computers on the WAN to access devices on the LAN.
•WAN to Router
By default the AMG1302-T11C stops computers on the WAN from managing the AMG1302-T11C.
You could configure one of these rules to allow a WAN computer to manage the AMG1302-T11C.
Note: You also need to configure the remote management settings to allow a WAN
computer to manage the AMG1302-T11C.
You may define additional rules and sets or modify existing ones but please exercise extreme
caution in doing so.
For example, you may create rules to:
• Block certain types of traffic, such as IRC (Internet Relay Chat), from the LAN to the Internet.
• Allow certain types of traffic, such as Lotus Notes database synchronization, from specific hosts
on the Internet to specific hosts on the LAN.
• Allow everyone except your competitors to access a web server.
• Restrict use of certain protocols, such as Telnet, to authorized users on the LAN.
•LAN to Router •WAN to LAN
• LAN to WAN • WAN to Router
To Next Page
Loading...
