9,561
edits
Changes
Template:Networking rutos manual firewall (view source)
Revision as of 12:10, 21 November 2022
, 12:10, 21 November 2022no edit summary
The <b>Reset</b> button resets the custom rules field to its default state.
The <b>Reset</b> button resets the custom rules field to its default state.
==DMZ==
The <b>DMZ</b> is a security concept. It comprises the separation of the LAN-side network into at least two networks: the user LAN and the DMZ. Generally the DMZ is imprisoned: only access to certain ports from the Internet are allowed into the DMZ, while the DMZ is not allowed to establish new connections to the WAN-side or LAN-side networks. That way, if a server inside of the DMZ is hacked the potential damage that can be done remains restricted! The whole point of the DMZ is to cleanly create a unique firewall rule set that dramatically restricts access in to, and out of the, DMZ.
==Settings==
The <b>Settings</b> section is used to set up the DMZ configuration. Refer to the table below for information on each configuration field.
[[File:Networking_rutos_manual_dmz_general_settings_v1.png|border|class=tlt-border]]
<table class="nd-mantable">
<tr>
<th>Field</th>
<th>Value</th>
<th>Description</th>
</tr>
<tr>
<td>Enable</td>
<td>off | on; default: <b>off</b></td>
<td>Enables the DMZ configuration.</td>
</tr>
<tr>
<td>Host IP</td>
<td>ipv4; default: <b>none</b></td>
<td>Specifies the IP address of the DMZ host.</td>
</tr>
<tr>
<td>Protocol</td>
<td>custom | All | <span style="color:blue">TCP+UDP</span> | <span style="color:blue">TCP</span> | <span style="color:blue">UDP</span> | ICMP; default: <b>All</b></td>
<td>Specifies for which protocols the DMZ will be used.</td>
</tr>
<tr>
<td><span style="color:blue">Ports</span></td>
<td>off | on; default: <b>off</b></td>
<td>Match incoming traffic directed at the given destination port or port range on DMZ host IP.</td>
</tr>
</table>
[[Category:{{{name}}} Network section]]
[[Category:{{{name}}} Network section]]
