Buffalo WBMR-HP-GN User Manual page 22

Limits the type of packets allowed to pass between the Internet and LAN.
When packets reach the AirStation, the firewall evaluates the packets, and
forwards packets that don't match any filter to their destination. The Firewall
blocks unnecessary packets from the Internet side and prevents leaking
secure information from the LAN side.
Prohibit NBT and Microsoft-DS routing
Prevents unexpected external access via Microsoft network sharing. The
default setting is disabled.
Reject IDENT requests
When this is enabled, the AirStation sends reject packets if it receives an
IDENT request. The default setting is enabled. Use this filter when the com-
munication speed goes down using a network application like e-mail, ftp or
WEB. If IDENT requests are forwarded to a LAN side client by address transla-
tion setting (DMZ or TCP port:113), this basic rule is ignored.
Block Ping from Internet
An anonymous Internet request is an attempt to ping your broadband gate-
way's WAN interface. Pinging is a way of checking if a system is running at a
particular IP address. It can also be used to hunt for certain kinds of vulner-
abilities in the system. Blocking WAN requests means not responding to pings
coming from the Internet. This is the default setting.
IP Filter Settings
20