Connection Tracking - Secure Computing SG300 User Manual

Enter an arbitrary Description of service, the Name or IP address of the computer
hosting this service on your network, the External Port number for this service and
the Internal Port number for this service. Select whether the service uses the TCP or
UDP protocol. Click OK.
This rule now appears on the SnapGear unit UPnP page, under Current UPnP Port
Mappings.

Connection Tracking

Connection tracking keeps a record of what packets have passed through the unit, and
how they relate to each other. A sequence of related packets is called a connection.
This is required for stateful packet filtering and network address translation (NAT).
Most packets are correctly handled by generic support for protocols such as TCP and
UDP. However, some protocols are more complicated and require specific connection
tracking modules in order to record the state correctly. For example, FTP requires
additional connections for data transfer, and also transmits IP addresses and ports within
the data portion of packets.
Configuring connection tracking
You can select which connection tracking modules are used by checking the Enabled
option. Since connection tracking modules can allow additional connections through the
firewall, you should disable modules that you do not need.
Firewall
161