Filter Setup - Draytek VigorIPPBX 3510 User Manual

Accept large
incoming..
Enable Strict Security
Firewall
5 . 4 . 3 F i l t e r S e t u p
5 . 4 . 3 F i l t e r S e t u p
Click Firewall and click Filter Setup to open the setup page.
To edit or add a filter, click on the set number to edit the individual set. The following page
will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit
each rule. Check Active to enable the rule.
Window size – It determines the size of TCP protocol
(0~65535). The more the value is, the better the performance will
be. However, if the network is not stable, small value will be
proper.
Session timeout–Setting timeout for sessions can make the best
utilization of network resources. However, Queue timeout is
configured for TCP protocol only; session timeout is configured
for the data flow which matched with the firewall rule.
Some on-line games (for example: Half Life) will use lots of
fragmented UDP packets to transfer game data. Instinctively as a
secure firewall, Vigor router will reject these fragmented packets
to prevent attack unless you enable "Accept large incoming
fragmented UDP or ICMP Packets". By checking this box, you
can play these kinds of on-line games. If security concern is in
higher priority, you cannot enable "Accept large incoming
fragmented UDP or ICMP Packets".
For the sake of security, you might want the router executing
strict security checking for data transmission. Check this box to
enable such function.
119
VigorIPPBX 3510 Series User's Guide