Firewall Settings - D-Link DIR-615 User Manual

Section 3 - Configuration
A firewall protects your network from the outsde world. The D-Lnk DIR-615 offers a firewall type functonalty. The SPI feature helps prevent cyber
attacks. Sometmes you may want a computer exposed to the outsde world for certan types of applcatons. If you choose to expose a computer,
you can enable DMZ. DMZ s short for Demltarzed Zone. Ths opton wll expose the chosen computer completely to the outsde world.
Enable SPI:
SPI (Stateful Packet Inspecton, also known as dynamc packet filterng) helps
to prevent cyber attacks by trackng more state per sesson. It valdates that
the traffic passng through the sesson conforms to the protocol.
NAT Endpoint
Select one of the followng for TCP and UDP ports:
Filtering:
Endpoint.Independent.- Any ncomng traffic sent to an open port wll be
forwarded to the applcaton that opened the port. The port wll close f dle
for 5 mnutes.
Address. Restricted - Incomng traffic must match the IP address of the
outgong connecton.
Address.+.Port.Restriction - Incomng traffic must match the IP address and
port of the outgong connecton.
Enable Anti-Spoof
Enable ths opton to provde protecton from certan knds of "spoofing"
Checking:
attacks.
Enable DMZ Host:
If an applcaton has trouble workng from behnd the router, you can expose
one computer to the Internet and run the applcaton on that computer.
Note: Placing a computer in the DMZ may expose that computer to a variety of
security risks. Use of this option is only recommended as a last resort.
IP Address:
Specfy the IP address of the computer on the LAN that you want to have unrestrcted Internet communcaton. If ths computer obtans ts IP address
automatcally usng DHCP, be sure to make a statc reservaton on the System.>.Network.Settings page so that the IP address of the DMZ machne does
not change.
D-Lnk DIR-615 User Manual

Firewall Settings

41