Table 15: Ucm6100 Firewall->Static Defense->Current Service; Table 16: Typical Firewall Settings - Grandstream Networks UCM6100 Series User Manual

Port
7777
389
22
80
8089
69
9090
6060
5060
4569
5353
37435
For typical firewall settings, users could configure the following options on the UCM6100.
Ping Defense
Enable
Ping-of-Death
Defense Enable
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic
going through the UCM6100. To create new rule, click on "Create New Rule" button and a new window will
pop up for users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it's checked, all
the rules will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule
that meets all the following requirements, the option "Reject Rules" will be allowed to check:

Action: "Accept"

Type "In"

Destination port is set to the system login port (e.g., by default 8089)

Protocol is not UDP
Firmware Version 1.0.10.39
Table 15: UCM6100 Firewall->Static Defense->Current Service
Process Type
Asterisk tcp/IPv4
Slapd tcp/IPv4
Dropbear tcp/IPv4
Lighthttpd tcp/IPv4
Lighthttpd tcp/IPv4
Opentftpd udp/IPv4
Asterisk udp/IPv4
zero_config udp/IPv4
Asterisk udp/IPv4
Asterisk udp/IPv4
zero_config udp/IPv4
Syslogd udp/IPv4

Table 16: Typical Firewall Settings

If enabled, ICMP response will not be allowed for Ping request. The default
setting is disabled. To enable or disable it, click on the check box for the LAN or
WAN (UCM6102 only) interface.
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM6102 only) interface.
UCM6100 Series IP PBX User Manual
Protocol or Service
SIP
LDAP
SSH
HTTP
HTTPS
TFTP
SIP
UCM6100 zero_config service
SIP
SIP
UCM6100 zero_config service
Syslog
Page 71 of 331