Firewall; Administration; Adress/Port Groups; Firewall Groups - NetModule NB3000-Line-Hd User Manual

NB3000-Line-Hd User Manual 4.2

5.5. FIREWALL

5.5.1. Administration

NetModule routers use Linux's net lter/iptables rewall framework
http://www.netfilter.org
(see for more information) which supports stateful inspection,
that is, granting the same permissions for inherited connections within an IP session (e.g.
FTP which builds up a control and data connection).
The administration page can be used to enable and disable rewalling. When turning it on, a
shortcut can be used to generate a prede ned set of rules which allow administration (over
HTTP, HTTPS, SSH or TELNET) by default but block any other packets coming from the WAN
interface.

5.5.2. Adress/Port Groups

This menu can be used to form address or port groups which can be later used for rewall
rules in order to reduce the number of rules. If address or port groups have been refer-
enced, packets will match if one of the con gured entities apply to the packet.
Figure 5.24.: Firewall Groups
91