Creating Ip Filter Rules - Ericsson HM210dp User Manual

Security Level: When High is selected, only those rules that are assigned a
security value of High will be in effect. The same is true for the Medium and
Low settings. When None is selected, IP Filtering is disabled.
Private/Public/DMZ Default Action: This setting specifies a default action to be
taken (Accept or Deny) on private, public, or DMZ-type device interfaces when
they receive packets that do not match any of the filtering rules.
Public - The interface connect to the Internet, e.g. PPP, EoA and IPoA interfaces.
Typically, the global setting for public interfaces is Deny, so that all accesses to
your LAN initiated from external computers are denied (discarded at the public
interface), except for those allowed by a specific IP Filter rule.
Private - Typically, the global setting for private interfaces is Accept, so that
LAN computers have access to the Internet connection of the HM210dp/di.
DMZ - Refers to computers that are available for both public and in-network
accesses (such as a company's public Web server). Packets received on a DMZ
interface - whether from a LAN or external source - are subject to a set of
protections that is in between public and private interfaces. The global setting for
DMZ-type interfaces may be set to Deny so that all attempts to access these
servers are denied by default. The administrator may then configure IP Filter rules
to allow accesses of certain types.
11.2.3

Creating IP Filter Rules

On the main IP Filter page, click Add. The IP Filter Rule - Add page appears:
1
EN/LZT 108 6492 R1
April 2003
Firewall Configuration
61 (98)