Asus DSL-N12HP users manual in English - Page 123

Appendix A - Firewall

Get Asus DSL-N12HP PDF manuals and user guides View all Asus DSL-N12HP manuals
Add to My Manuals
Save this manual to your list of manuals

Page 123 highlights

Appendix A - Firewall STATEFUL PACKET INSPECTION Refers to an architecture, where the firewall keeps track of packets on each connection traversing all its interfaces and makes sure they are valid. This is in contrast to static packet filtering which only examines a packet based on the information in the packet header. DENIAL OF SERVICE ATTACK Is an incident in which a user or organization is deprived of the services of a resource they would normally expect to have. Various DoS attacks the device can withstand are ARP Attack, Ping Attack, Ping of Death, Land, SYN Attack, Smurf Attack, and Tear Drop. TCP/IP/PORT/INTERFACE FILTER These rules help in the filtering of traffic at the Network layer (i.e. Layer 3). When a Routing interface is created, Enable Firewall must be checked. Navigate to Advanced Setup > Security > IP Filtering. OUTGOING IP FILTER Helps in setting rules to DROP packets from the LAN interface. By default, if the Firewall is Enabled, all IP traffic from the LAN is allowed. By setting up one or more filters, specific packet types coming from the LAN can be dropped. Example 1: Filter Name: Out_Filter1 Protocol: TCP Source IP address: 192.168.1.45 Source Subnet Mask: 255.255.255.0 Source Port: 80 Dest. IP Address: NA Dest. Subnet Mask: NA Dest. Port: NA 123

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
123
Appendix A - Firewall
STATEFUL PACKET INSPECTION
Refers to an architecture, where the firewall keeps track of packets
on each connection traversing all its interfaces and makes sure
they are valid. This is in contrast to static packet filtering which
only examines a packet based on the information in the packet
header.
DENIAL OF SERVICE ATTACK
Is an incident in which a user or organization is deprived of the
services of a resource they would normally expect to have. Various
DoS attacks the device can withstand are ARP Attack, Ping Attack,
Ping of Death, Land, SYN Attack, Smurf Attack, and Tear Drop.
TCP/IP/PORT/INTERFACE FILTER
These rules help in the filtering of traffic at the Network layer (i.e.
Layer 3).
When a Routing interface is created, Enable Firewall must be
checked.
Navigate to
Advanced Setup
>
Security
>
IP Filtering
.
OUTGOING IP FILTER
Helps in setting rules to DROP packets from the LAN interface.
By default, if the Firewall is Enabled, all IP traffic from the LAN is
allowed. By setting up one or more filters, specific packet types
coming from the LAN can be dropped.
Example 1
:
Filter Name:
Out_Filter1
Protocol:
TCP
Source IP address:
192.168.1.45
Source Subnet Mask:
255.255.255.0
Source Port:
80
Dest. IP Address:
NA
Dest. Subnet Mask:
NA
Dest. Port:
NA