31,703
edits
Changes
no edit summary
{{Template: Networking_rutxxx_manual_fw_disclosure
| fw_version = RUT2XX_R_00.01.13
}}
==Summary==
==Summary==
{{Template: webui_network_firewall_summary}}
{{Template: webui_network_firewall_summary}}
==General Settings==
==General Settings==
A zone section groups one or more interfaces and serves as a source or destination for forwardings, rules and redirects. The '''Zone Forwarding''' section allows you to configure these forwardings.
A zone section groups one or more interfaces and serves as a source or destination for forwardings, rules and redirects. The '''Zone Forwarding''' section allows you to configure these forwardings.
[[Image:Network firewall general zone.PNG]]
[[File:Networking_rut2_manual_firewall_general_settings_zone_forwarding.png|border|class=tlt-border]]
<table class="nd-mantable">
<table class="nd-mantable">
<tr>
<tr>
<th>field name</th>
<th>Field</th>
<th>value</th>
<th>Value</th>
<th>description</th>
<th>Description</th>
</tr>
</tr>
<tr>
<tr>
<td>Destination zones</td>
<td>Destination zones</td>
<td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> | <span style="background:#CEF58F"> l2tp: l2tp </span> | <span style="background:#9BEAC3"> pptp: pptp </span> | <span style="background:#96EBE8"> vpn: openvpn </span> | <span style="background:#D0E1EF"> wan: ppp </span> | <span style="background:#DDDDDD"> lan: lan </span></td>
<td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> | <span style="background:#CEF58F"> l2tp: l2tp </span> | <span style="background:#9BEAC3"> pptp: pptp </span> | <span style="background:#96EBE8"> vpn: openvpn </span> | <span style="background:#D0E1EF"> wan: ppp </span> | <span style="background:#DDDDDD"> lan: lan </span></td>
<td>The destination zone to which data packets will be redirected to</td>
<td>The destination zone to which data packets will be redirected to.</td>
</tr>
<tr>
<td>Input</td>
<td>Reject | Drop | Accept; default: <b>Accept</b></td>
<td>Default policy for traffic entering the zone.</td>
</tr>
<tr>
<td>Output</td>
<td>Reject | Drop | Accept; default: <b>Accept</b></td>
<td>Default policy for traffic originating from and leaving the zone.</td>
</tr>
<tr>
<td>Forward</td>
<td>Reject | Drop | Accept; default: <b>Accept</b></td>
<td>Default policy for traffic forwarded between the networks belonging to the zone.</td>
</tr>
</tr>
<tr>
<tr>
<td>Masquerading</td>
<td>Reject | Drop | Accept</td>
<td>yes | no; default: <b>no</b></td>
<td>Action to be performed with the redirected packets </td>
<td>Turns Masquerading off or on. MASQUERADE is an iptables target that can be used instead of the SNAT (source NAT) target when the external IP of the network interface is not known at the moment of writing the rule (when the interface gets the external IP dynamically).</td>
</tr>
</tr>
</table>
</table>
