We take section of common use Globespan chip ADSL Modem as the examples, comes to explain in detail how to dispose and manage ADSL the Modem built-in firewall.
First, firewall's establishment
Enters ADSL Modem the management page, the click “the service →FireWall”, we may make the detailed establishment in the page to the firewall.
Blacklist Status: Blacklist condition. If you want to let ADSL Modem use the blacklist condition to carry on the work, then may choose Enable, otherwise chooses Disable.
Blacklist Period(min): (Take minute as unit) will assign computer's IP address in the stipulation time to occupy under the blacklist condition.
Attack Protection: Cancels chooses “Enable” to be possible to begin using the firewall protection function which in ADSL Modem constructs.
DoS Protection: Clicks on the Enable option to be possible to obtain SYN DoS, ICMP DoS and the Per-host DoS ministrant protection.
Max Half Open TCP Conn: When hypothesis not completely open condition, current IP connects the open percentage. The TCP connection will open under the condition possibly to exhaust the available IP connection number not completely, if percentage exceeding the allowed figure, this will open the connection to close not completely, a new connection will substitute for it.
Max ICMP Conn: In order to manage ICMP to establish the current use the connection quantity percentage, if percentage exceeding the allowed figure, the new connection will substitute for the old connection to start to transmit the data.
Max Single Host Conn: The hypothesis independent computation function use current IP connection's percentage, establishes when this percentage must consider in local area network's computer quantity.
Log Destination: Uses in leaving in the record upper row attacks firewall's event, these event's record may transmit the manager who or assigns for the system.
E-mail ID of Admin 1/2/3: Assigns manager's electronic mail address. Uses in receiving the firewall the report which attacks. In the transmission email reported that in the information including the time of attack, carries on the attack computer's source IP address, the goal IP address, the use agreement and so on.
Second, management blacklist tabulation
If confirmed some data packet has attacked firewall's hypothesis or certain IP filtration rule, then in period of time which the present assigns, the firewall will block this kind of data packet the source IP address, but the user must begin using the blacklist tabulation the establishment.
Must examine that the current blacklist computer's tabulation, may in “the firewall establishment” the page base click “the blacklist”, in the form which appears contain the following information:
Main engine IP address: The record sends out the attack data packet computer's IP address.
Other pages: : 1 * 2 * Next>>
|
You are here: hacking technology
> firewall
> Content
Category: Home
> firewall