Policies, Triggers, Intrusion Detection, Logging - BT Broadband Module User Manual

BT Versatility
Broadband Module/Broadband Module Plus Manual
•
Enter the following parameters:
Global IP address
Internal IP Address
Transport Type
External Port
Range
Internal Port
Range
•
Select "Add Reserved Mapping"

Policies, Triggers, Intrusion Detection, Logging

The security policy settings, stateful inspection triggers, intrusion policy detection and logging
settings can be displayed and changed.
Security Policy
Three types of filters can be defined in the firewall:
Port Filters are used to allow or block a specific TCP/IP application level protocol. The
parameters used to specify this filter are source and destination IP address or range of
addresses, a transport level protocol TCP/UDP/ICMP), and a port or range of ports which define
the application level protocol.
Raw IP Filters are used to allow or block a specific protocol (non TCP/IP) carried within an IP
packet. The parameters used to specify this filter are source and destination IP address or range
of addresses, and a protocol number which identifies the protocol carried in the IP packet.
Host Validators are used to block all traffic from a specific host. The parameter used to specify
this filter are an IP address or range of addresses.
Note that if invalid filter entries are added, an error message will be displayed when the
configuration is saved.
•
Select "Security Policy Configuration ..."
The following screen is displayed.
64
This is the public IP address assigned to the WAN interface
This is the internal IP address of the server on the LAN
Select a protocol from the drop down list
A port or port range can be defined for the external IP
address
A port or port range can be defined for the internal IP
address