Changes

RUT900 Firewall (view source)

Revision as of 08:53, 1 March 2019

489 bytes removed , 08:53, 1 March 2019

no edit summary

Line 19: Line 19:

<tr>

<td>Drop invalid packets</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>A “Drop” action is performed on a packet that is determined to be invalid</td>

</tr>

<tr>

<td>Input</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Accept'''</td>

+

<td>Reject | Drop | Accept; Default: '''Accept'''</td>

<td>Action* that is to be performed for packets that pass through the Input chain</td>

</tr>

<tr>

<td>Output</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Accept'''</td>

+

<td>Reject | Drop | Accept; Default: '''Accept'''</td>

<td>Action* that is to be performed for packets that pass through the Output chain</td>

</tr>

<tr>

<td>Forward</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept; Default: '''Reject'''</td>

+

<td>Reject | Drop | Accept; Default: '''Reject'''</td>

<td>Action* that is to be performed for packets that pass through the Forward chain</td>

</tr>

Line 60: Line 60:

<tr>

<td>Source zone</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles DMZ On or Off</td>

</tr>

Line 86: Line 86:

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan </td>

+

<td>The source zone from which data packets will redirected from</td>

</tr>

<tr>

<td>Destination zones</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan </td>

+

<td>The destination zone to which data packets will be redirected to</td>

</tr>

<tr>

<td>Default forwarding action</td>

−

<td>Reject ~~{{!}}~~ Drop ~~{{!}}~~ Accept</td>

+

<td>Reject | Drop | Accept</td>

<td>Action to be performed with the redirected packets</td>

</tr>

Line 127: Line 127:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Type of protocol of incoming packet</td>

</tr>

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Traffic will be forwarded from this port on the WAN network</td>

</tr>

Line 142: Line 142:

<tr>

<td>Internal port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>The rule will redirect the traffic to this port on the internal machine</td>

</tr>

Line 165: Line 165:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles a rule ON or OFF</td>

</tr>

Line 175: Line 175:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply</td>

</tr>

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' wan: ppp '''</td>

+

<td>The source zone from which data packets will redirected from</td>

</tr>

Line 195: Line 195:

<tr>

<td>Source port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Matches incoming traffic originating from the given source port or port range on the client host only</td>

</tr>

Line 205: Line 205:

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the external port, i.e., the port from which the third party is connecting </td>

</tr>

<tr>

<td>Internal zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' lan: lan '''</td>

+

<td>Specifies the internal zone, i.e., the zone where the incoming connection will be redirected to</td>

</tr>

Line 220: Line 220:

<tr>

<td>Internal port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the internal port, i.e., the port to which the incoming connection will be redirected to</td>

</tr>

<tr>

<td>Enable NAT loopback</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>NAT loopback enables your local network (i.e., behind your router/modem) to connect to a forward-facing IP address (such as 208.112.93.73) of a machine that it also on your local network</td>

</tr>

Line 294: Line 294:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Turns the rule ON or OFF</td>

</tr>

Line 304: Line 304:

<tr>

<td>Restrict to address family</td>

−

<td>IPv4 and IPv6 ~~{{!}}~~ IPv4 only ~~{{!}}~~ IPv6 only; Default: '''IPv4 and IPv6'''</td>

+

<td>IPv4 and IPv6 | IPv4 only | IPv6 only; Default: '''IPv4 and IPv6'''</td>

<td>Name of the rule, used purely for easier management purposes</td>

</tr>

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ ICMP ~~{{!}}~~ -- custom --; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | ICMP | -- custom --; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply</td>

</tr>

<tr>

<td>Source zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' wan: ppp '''</td>

+

<td>Specifies the external zone, i.e., the zone from which the third party connection will come</td>

</tr>

Line 329: Line 329:

<tr>

<td>Source port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the port or range of ports that the external host host will using as their source, i.e., the rule will apply only to hosts that use source ports specified in this field</td>

</tr>

<tr>

<td>External IP address</td>

−

<td>ip ~~{{!}}~~ ip/netmask ~~{{!}}~~ ANY; Default: '''ANY'''</td>

+

<td>ip | ip/netmask | ANY; Default: '''ANY'''</td>

<td>Specifies the external IP address or range of external IPs of the local host, i.e., the rule will apply only to the external IP addresses specified in this field</td>

</tr>

<tr>

<td>External port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Specifies the external port, i.e., the port from which the third party is connecting</td>

</tr>

<tr>

<td>Destination zone</td>

−

<td> gre: gre tunnel | hotspot: ~~{{!}}~~ l2tp: l2tp ~~{{!}}~~ pptp: pptp ~~{{!}}~~ vpn: openvpn ~~{{!}}~~ wan: ppp ~~{{!}}~~ lan: lan ; Default: ''' lan: lan '''</td>

+

<td>Match forwarded traffic to the given destination zone only</td>

</tr>

Line 354: Line 354:

<tr>

<td>Destination port</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " "</td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " "</td>

<td>Match forwarded traffic to the given destination port or port range only</td>

</tr>

<tr>

<td>Action</td>

−

<td>Drop ~~{{!}}~~ Accept ~~{{!}}~~ Reject ~~{{!}}~~ Don't track; Default: '''no'''</td>

+

<td>Drop | Accept | Reject | Don't track; Default: '''no'''</td>

<td>Action to be taken on the packet if it matches the rule. You can also define additional options like limiting packet volume, and defining to which chain the rule belongs.

Line 392: Line 392:

<tr>

<td>PROTOCOL</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ Other; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | Other; Default: '''TCP+UDP'''</td>

<td>Specifies to which protocols the rule should apply </td>

</tr>

<tr>

<td>EXTERNAL PORT</td>

−

<td>integer [0..65535] ~~{{!}}~~ range of integers [0..65534] - [1..65535]; Default: " " </td>

+

<td>integer [0..65535] | range of integers [0..65534] - [1..65535]; Default: " " </td>

<td>Specifies which port should be opened</td>

</tr>

Line 423: Line 423:

<tr>

<td>Source</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Match incoming traffic from selected address family only</td>

</tr>

<tr>

<td>Destination</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''WAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''WAN'''</td>

<td>Forward incoming traffic to selected address family only</td>

</tr>

Line 454: Line 454:

<tr>

<td>Protocol</td>

−

<td>TCP+UDP ~~{{!}}~~ TCP ~~{{!}}~~ UDP ~~{{!}}~~ Other...; Default: '''TCP+UDP'''</td>

+

<td>TCP+UDP | TCP | UDP | Other...; Default: '''TCP+UDP'''</td>

<td>Protocol of the packet that is being matched against traffic rules</td>

</tr>

<tr>

<td>Source</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Match incoming traffic from selected address family only</td>

</tr>

<tr>

<td>Destination</td>

−

<td>GRE ~~{{!}}~~ HOTSPOT ~~{{!}}~~ L2TP ~~{{!}}~~ LAN ~~{{!}}~~ PPTP ~~{{!}}~~ VPN ~~{{!}}~~ WAN; Default: '''LAN'''</td>

+

<td>GRE | HOTSPOT | L2TP | LAN | PPTP | VPN | WAN; Default: '''LAN'''</td>

<td>Forward incoming traffic to selected address family only</td>

</tr>

Line 474: Line 474:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

Line 506: Line 506:

<tr>

<td>Enable SYN flood protection</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

Line 521: Line 521:

<tr>

<td>TCP SYN cookies</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Enable the use of SYN cookies (particular choices of initial TCP sequence numbers by TCP servers)</td>

</tr>

Line 542: Line 542:

<tr>

<td>Enable ICMP requests</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Enable ICMP limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles ICMP echo-request limit in selected period ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>Select ICMP echo-request period limit</td>

</tr>

Line 583: Line 583:

<tr>

<td>Enable SSH limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which SSH connections are to be limited</td>

</tr>

Line 619: Line 619:

<tr>

<td>Enable HTTP limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which HTTP connections are to be limited</td>

</tr>

Line 657: Line 657:

<tr>

<td>Enable HTTPS limit</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the rule ON or OFF</td>

</tr>

<tr>

<td>Limit period</td>

−

<td>Second ~~{{!}}~~ Minute ~~{{!}}~~ Hour ~~{{!}}~~ Day; Default: '''Second'''</td>

+

<td>Second | Minute | Hour | Day; Default: '''Second'''</td>

<td>The period in which HTTPS connections are to be limited</td>

</tr>

Line 697: Line 697:

<tr>

<td>Enable</td>

−

<td>yes ~~{{!}}~~ no; Default: '''yes'''</td>

+

<td>yes | no; Default: '''yes'''</td>

<td>Toggles the function ON or OFF</td>

</tr>

Line 728: Line 728:

<tr>

<td>SYN-FIN attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from SYN-FIN attacks ON or OFF</td>

</tr>

<tr>

<td>SYN-RST attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from SYN-RST attacks ON or OFF</td>

</tr>

<tr>

<td>X-Mas attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from X-Mas attacks ON or OFF</td>

</tr>

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from FIN scan attacks ON or OFF</td>

</tr>

<tr>

<td>NULLflags attack</td>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles protection from NULLflags attacks ON or OFF</td>

</tr>

Line 774: Line 774:

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles H323 filtering ON or OFF</td>

</tr>

<tr>

−

<td>yes ~~{{!}}~~ no; Default: '''no'''</td>

+

<td>yes | no; Default: '''no'''</td>

<td>Toggles SIP filtering ON or OFF</td>

</tr>

</table>

+

[[Category:RUT900 WebUI]]

Dziugas

Bureaucrats, Interface administrators, Administrators

31,703

edits

Namespaces

Variants

Views

More

Search

Changes

RUT900 Firewall (view source)

Revision as of 08:53, 1 March 2019

Navigation menu

Personal tools

NAVIGATION

Tools

Categories