Table 14: Ucm6200 Firewall->Static Defense->Current Service; Table 15: Typical Firewall Settings - Grandstream Networks UCM6206 User Manual

Port
7777
389
2000
22
80
8089
69
9090
6060
5060
4569
5353
37435
For typical firewall settings, users could configure the following options on the UCM6200.
Ping Defense
Enable
Ping-of-Death
Defense Enable
Under "Custom Firewall Settings", users could create new rules to accept, reject or drop certain traffic going
through the UCM6200. To create new rule, click on "Create New Rule" button and a new window will pop up for
users to specify rule options.
Right next to "Create New Rule" button, there is a checkbox for option "Reject Rules". If it's checked, all the rules
will be rejected except the firewall rules listed below. In the firewall rules, only when there is a rule that meets all
the following requirements, the option "Reject Rules" will be allowed to check:
•
Action: "Accept"
•
Type "In"
•
Destination port is set to the system login port (e.g., by default 8089)
•
Protocol is not UDP
Table 14: UCM6200 Firewall->Static Defense->Current Service
Process Type
Asterisk tcp/IPv4
Slapd tcp/IPv4
Asterisk tcp/IPv4
Dropbear tcp/IPv4
Lighthttpd tcp/IPv4
Lighthttpd tcp/IPv4
Opentftpd udp/IPv4
Asterisk udp/IPv4
zero_config udp/IPv4
Asterisk udp/IPv4
Asterisk udp/IPv4
zero_config udp/IPv4
Syslogd udp/IPv4

Table 15: Typical Firewall Settings

If enabled, ICMP response will not be allowed for Ping request. The default
setting is disabled. To enable or disable it, click on the check box for the LAN or
WAN (UCM6200) interface.
Enable to prevent Ping-of-Death attack to the device. The default setting is
disabled. To enable or disable it, click on the check box for the LAN or WAN
(UCM6200) interface.
UCM6200 Series User Manual
Protocol or Service
SIP
LDAP
SCCP
SSH
HTTP
HTTPS
TFTP
SIP
UCM6200 zero_config service
SIP
SIP
UCM6200 zero_config service
Syslog
P a g e | 66