Filter Setup - Draytek Vigor2110 Series User Manual

Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to
transfer game data. Instinctively as a secure firewall, Vigor router will reject these fragmented
packets to prevent attack unless you enable "Accept large incoming fragmented UDP or
ICMP Packets". By checking this box, you can play these kinds of on-line games. If security
concern is in higher priority, you cannot enable "Accept large incoming fragmented UDP or
ICMP Packets".
4 . 5 . 3 F i l t e r S e t u p
4 . 5 . 3 F i l t e r S e t u p
Click Firewall and click Filter Setup to open the setup page.
To edit or add a filter, click on the set number to edit the individual set. The following page
will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit
each rule. Check Active to enable the rule.
Filter Rule
Window size – It determines the size of TCP protocol
(0~65535). The more the value is, the better the performance will
be. However, if the network is not stable, small value will be
proper.
Session timeout–Setting timeout for sessions can make the best
utilization of network resources. However, Queue timeout is
configured for TCP protocol only; session timeout is configured
for the data flow which matched with the firewall rule.
Click a button numbered (1 ~ 7) to edit the filter rule. Click the button
will open Edit Filter Rule web page. For the detailed information,
refer to the following page.
112
Vigor2110 Series User's Guide