D-Link DFL-1660 User Manual page 406

Network security firewall
Hide thumbs Also See for DFL-1660:
Table of Contents

Advertisement

10.1.12. More Pipe Examples
If SAT is being used, for example with a web server or ftp server, that traffic also needs to be forced
into pipes or it will escape traffic shaping and ruin the planned quality of service. In addition, server
traffic is initiated from the outside so the order of pipes needs to be reversed: the forward pipe is the
in-pipe and the return pipe is the out-pipe.
A simple solution is to put a "catch-all-inbound" rule at the bottom of the pipe rule. However, the
external interface (wan) should be the source interface to avoid putting into pipes traffic that is
coming from the inside and going to the external IP address. This last rule will therefore be:
Rule
Forward
Name
Pipes
all-in
in-pipe
Return
Source
Pipes
Interface
out-pipe
wan
Note
If the SAT is from an ARPed IP address, the wan interface needs to be the destination.
Source
Destination
Network
Interface
all-nets
core
406
Chapter 10. Traffic Management
Destination
Service
Prec
Network
all-nets
All
0

Advertisement

Table of Contents
loading

Table of Contents