Changes

RUT230 Firewall (view source)

Revision as of 08:51, 1 March 2019

489 bytes removed , 08:51, 1 March 2019

no edit summary

Line 19: Line 19:

<tr>

<td>Drop invalid packets</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>A “Drop” action is performed on a packet that is determined to be invalid</td>

</tr>

<tr>

<td>Input</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Accept'''</td>

+

<td>Reject | Drop | Accept; Default: '''Accept'''</td>

<td>Action'''*''' that is to be performed for packets that pass through the Input chain</td>

</tr>

<tr>

<td>Output</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Accept'''</td>

+

<td>Reject | Drop | Accept; Default: '''Accept'''</td>

<td>Action'''*''' that is to be performed for packets that pass through the Output chain</td>

</tr>

<tr>

<td>Forward</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Reject'''</td>

+

<td>Reject | Drop | Accept; Default: '''Reject'''</td>

<td>Action'''*''' that is to be performed for packets that pass through the Forward chain</td>

</tr>

Line 62: Line 62:

<tr>

<td>Source zone</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles DMZ On or Off</td>

</tr>

Line 88: Line 88:

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan </td>

+

<td>The source zone from which data packets will redirected from</td>

</tr>

<tr>

<td>Destination zones</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan </td>

+

<td>The destination zone to which data packets will be redirected to</td>

</tr>

<tr>

<td>Default forwarding action</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept</td>

+

<td>Reject | Drop | Accept</td>

<td>Action to be performed with the redirected packets </td>

</tr>

Line 129: Line 129:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Type of protocol of incoming packet</td>

</tr>

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Traffic will be forwarded from this port on the WAN network</td>

</tr>

Line 144: Line 144:

<tr>

<td>Internal port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>The rule will redirect the traffic to this port on the internal machine</td>

</tr>

Line 167: Line 167:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles a rule ON or OFF</td>

</tr>

Line 177: Line 177:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply</td>

</tr>

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' wan: ppp '''</td>

+

<td>The source zone from which data packets will redirected from</td>

</tr>

Line 197: Line 197:

<tr>

<td>Source port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Matches incoming traffic originating from the given source port or port range on the client host only</td>

</tr>

Line 207: Line 207:

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the external port, i.e., the port from which the third party is connecting</td>

</tr>

<tr>

<td>Internal zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' lan: lan '''</td>

+

<td>Specifies the internal zone, i.e., the zone where the incoming connection will be redirected to</td>

</tr>

Line 222: Line 222:

<tr>

<td>Internal port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the internal port, i.e., the port to which the incoming connection will be redirected to</td>

</tr>

<tr>

<td>Enable NAT loopback</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>NAT loopback enables your local network (i.e., behind your router/modem) to connect to a forward-facing IP address (such as 208.112.93.73) of a machine that it also on your local network</td>

</tr>

Line 296: Line 296:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Turns the rule ON or OFF</td>

</tr>

Line 306: Line 306:

<tr>

<td>Restrict to address family</td>

−

<td>IPv4 and IPv6 ~~{{!}}~~ IPv4 only ~~{{!}}~~ IPv6 only; Default: '''IPv4 and IPv6'''</td>

+

<td>IPv4 and IPv6 | IPv4 only | IPv6 only; Default: '''IPv4 and IPv6'''</td>

<td>Name of the rule, used purely for easier management purposes</td>

</tr>

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply</td>

</tr>

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' wan: ppp '''</td>

+

<td>Specifies the external zone, i.e., the zone from which the third party connection will come</td>

</tr>

Line 331: Line 331:

<tr>

<td>Source port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the port or range of ports that the external host host will using as their source, i.e., the rule will apply only to hosts that use source ports specified in this field</td>

</tr>

<tr>

<td>External IP addres</td>

−

<td>ip ~~{{!}}~~ ip/netmask ~~{{!}}~~ ANY; Default: '''ANY'''</td>

+

<td>ip | ip/netmask | ANY; Default: '''ANY'''</td>

<td>Specifies the external IP address or range of external IPs of the local host, i.e., the rule will apply only to the external IP addresses specified in this field</td>

</tr>

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the external port, i.e., the port from which the third party is connecting</td>

</tr>

<tr>

<td>Destination zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' lan: lan '''</td>

+

<td>Match forwarded traffic to the given destination zone only</td>

</tr>

Line 356: Line 356:

<tr>

<td>Destination port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Match forwarded traffic to the given destination port or port range only</td>

</tr>

<tr>

<td>Action</td>

−

<td>Drop ~~{{!}}~~ Accept ~~{{!}}~~ Reject ~~{{!}}~~ Don't track; Default: '''no'''</td>

+

<td>Drop | Accept | Reject | Don't track; Default: '''no'''</td>

<td>Action to be taken on the packet if it matches the rule. You can also define additional options like limiting packet volume, and defining to which chain the rule belongs.

Line 394: Line 394:

<tr>

<td>PROTOCOL</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ Other; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | Other; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply</td>

</tr>

<tr>

<td>EXTERNAL PORT</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies which port should be opened</td>

</tr>

Line 425: Line 425:

<tr>

<td>Source</td>

−

<td>RE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>RE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Match incoming traffic from selected address family only</td>

</tr>

<tr>

<td>Destination</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''WAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''WAN'''</td>

<td>Forward incoming traffic to selected address family only</td>

</tr>

Line 456: Line 456:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ Other...; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | Other...; Default: '''TCP+UDP'''</td>

<td>Protocol of the packet that is being matched against traffic rules</td>

</tr>

<tr>

<td>Source</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Match incoming traffic from selected address family only</td>

</tr>

<tr>

<td>Destination</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Forward incoming traffic to selected address family only</td>

</tr>

Line 476: Line 476:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

Line 508: Line 508:

<tr>

<td>Enable SYN flood protection</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

Line 523: Line 523:

<tr>

<td>TCP SYN cookies</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Enable the use of SYN cookies (particular choices of initial TCP sequence numbers by TCP servers)</td>

</tr>

Line 544: Line 544:

<tr>

<td>Enable ICMP requests</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Enable ICMP requests</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles ICMP echo-request limit in selected period ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>Select ICMP echo-request period limit</td>

</tr>

Line 585: Line 585:

<tr>

<td>Enable SSH limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which SSH connections are to be limited</td>

</tr>

Line 620: Line 620:

<tr>

<td>Enable HTTP limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which HTTP connections are to be limited</td>

</tr>

Line 658: Line 658:

<tr>

<td>Enable HTTPS limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which HTTPS connections are to be limited</td>

</tr>

Line 698: Line 698:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the function ON or OFF</td>

</tr>

Line 729: Line 729:

<tr>

<td>SYN-FIN attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from SYN-FIN attacks ON or OFF</td>

</tr>

<tr>

<td>SYN-RST attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from SYN-RST attacks ON or OFF</td>

</tr>

<tr>

<td>X-Mas attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from X-Mas attacks ON or OFF</td>

</tr>

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from FIN scan attacks ON or OFF</td>

</tr>

<tr>

<td>NULLflags attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from NULLflags attacks ON or OFF</td>

</tr>

Line 775: Line 775:

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles H323 filtering ON or OFF</td>

</tr>

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles SIP filtering ON or OFF</td>

</tr>

</table>

+

[[Category:RUT230 WebUI]]

Dziugas

Bureaucrats, Interface administrators, Administrators

31,703

edits

Namespaces

Variants

Views

More

Search

Changes

RUT230 Firewall (view source)

Revision as of 08:51, 1 March 2019

Navigation menu

Personal tools

NAVIGATION

Tools

Categories