User manual ASUS SL1000

[. . . ] Internet Security Router User's Manual Revision 1. 1 Oct. 30, 2003 Copyright Information No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK COMPUTER INC. ASUS PROVIDES THIS MANUAL "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OR CONDITIONS OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL ASUS, ITS DIRECTORS, OFFICERS, EMPLOYEES OR AGENTS BE LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING DAMAGES FOR LOSS OF PROFITS, LOSS OF BUSINESS, LOSS OF USE OR DATA, INTERRUPTION OF BUSINESS AND THE LIKE), EVEN IF ASUS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES ARISING FROM ANY DEFECT OR ERROR IN THIS MANUAL OR PRODUCT. [. . . ] They appear here after you add them in the "Firewall Service" configuration page. Protocol This option allows you to select protocol type from a drop-down list. Available settings are All, TCP, UDP, ICMP, AH and ESP. Note that if you select "service" for the destination port, this option will not be available. NAT This option allows you to select the type of NAT for the outbound traffic. None IP Address NAT Pool Select this option if you don't intend to use NAT in this outbound ACL rule. Select this option to specify the IP address that you want the outbound traffic to use. Note this option is called NAPT or overload. Select this option to associate a pre-configured NAT pool to the rule. Note that only static, dynamic and overload NAT pool can be used to associate with an outbound ACL rule. Select this option to use the WAN interface IP address for the outbound traffic. Note that WAN IP must be configured prior to selecting this option. Interface Time Ranges Select a pre-configured time range during which the rule is active. Select "Always" to make the rule active at all times. Application Filtering This option allows you to select pre-configured FTP, HTTP, RPC and/or SMTP application filters from the drop-down list. Log Click on the "Enable" or "Disable" radio button to enable or disable logging for this ACL rule. VPN Click on the "Enable" radio button if you want the traffic to go through VPN; otherwise, click on the "Disable" radio button. 9. 4. 2 Access Outbound ACL Rule Configuration Page ­ (Firewall è Outbound ACL) Log into Configuration Manager as admin, click the Firewall menu, and then click the Outbound ACL submenu. The Firewall Outbound ACL Configuration page displays, as shown in Figure 9. 9. Note that when you open the Outbound ACL Configuration page, a list of existing ACL rules is also displayed at the bottom half of the configuration page such as those shown in Figure 9. 9. 56 Internet Security Router User's Manual Chapter 9. Configuring Firewall/NAT Settings 9. 4. 3 Add an Outbound ACL Rule To add an outbound ACL rule, follow the instructions below: 1. Open the Outbound ACL Rule Configuration Page (see section 9. 4. 2 Access Outbound ACL Rule Configuration Page). Select "Add New" from the "ID" drop-down list. Set desired action (Allow or Deny) from the "Action" drop-down list. Make changes to any or all of the following fields: source/destination IP, source/destination port, protocol, NAT, time ranges, application filtering, log, and VPN. [. . . ] Originally meant as a time duration, the TTL is usually represented instead as a maximum hop count; each router that receives a packet decrements this field by one. When the TTL reaches zero, the packet is discarded. protocol remote RIP RJ-45 routing rule SDNS SNMP subnet subnet mask TCP TCP/IP Telnet TFTP TTL 146 Internet Security Router User's Manual Appendix 16. Glossary twisted pair The ordinary copper telephone wiring long used by telephone companies. It contains one or more wire pairs twisted together to reduce inductance and noise. [. . . ]