Draytek Vigor2926L User Manual page 381

Data Filter
Always pass inbound
fragmented large
packets...
Enable Strict Security
Firewall
Block connections
initiated from WAN
Backup Firewall
Restore Firewall
Vigor2926 Series User's Guide
Check Enable to activate the Data Filter function. Assign a
start filter set for the Data Filter.
Some on-line games (for example: Half Life) will use lots of
fragmented UDP packets to transfer game data. Instinctively
as a secure firewall, Vigor router will reject these
fragmented packets to prevent attack unless you enable
"Always pass inbound fragmented large packets...". By
checking this box, you can play these kinds of on-line games.
If security concern is in higher priority, you cannot enable
"Always pass inbound fragmented large packets...".
For the sake of security, the router will execute strict
security checking for data transmission.
Such feature is enabled in default. All the packets, while
transmitting through Vigor router, will be filtered by
firewall. If the firewall system (e.g., content filter server)
does not make any response (pass or block) for these
packets, then the router's firewall will block the packets
directly.
Usually, IPv6 network sessions/traffic from WAN to LAN will
be accepted by IPv6 firewall in default.
IPv6 - To prevent remote client accessing into the PCs on
LAN, check the box to make the packets (routed from WAN to
LAN) via IPv6 being blocked by such router. It is effective
only for the packets routed but not for packets translated by
NAT.
IPv4 - To prevent remote client accessing into the PCs on
LAN, check the box to make the incoming packets via IPv4
being blocked by such router. It is effective only for the
packets routed but not for packets translated by NAT.
Click Backup to save the firewall configuration.
Click Select to choose a firewall configuration file. Then
click Restore to apply the file.
365