Air Live Router IP-1000R User Manual

 29
 
 
 
IP Address of DMZ Host 
DMZ (DeMilitarized Zone) Host is a host without the pr otection of firewall. It allows a computer to be 
exposed to unrestricted 2-way communication for  Internet games, Video conferencing, Internet 
telephony and other special applications.   
NOTE: This feature should be used only when needed.   
Non-standard FTP port 
You have to configure this item if you want to acce ss an FTP server whose port number is not 21. This 
setting will be lost after rebooting....

 30
4.6 Firewall Settings 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  

 31
4.6.1 Packet Filter 
 
 
 
Packet Filter enables you to control what packets ar e allowed to pass the router. Outbound filter applies 
on all outbound packets. However, Inbound filter applie s on packets that destined to Virtual Servers or 
DMZ host only. You can select one of the two filtering policies:   
1.  Allow all to pass except those match the specified rules   
2.  Deny all to pass except those match the specified rules 
You can specify 8 rules for each direction: inboun d or outbound. For...

 32
For source or destination port, you can define a single port (80) or a range of ports (1000-1999). Add 
prefix T or U to specify TCP or UDP protocol
. For example, T80, U53, U2000-2999. No prefix 
indicates both TCP and UDP are defined. An empty implies all port addresses.  Packet Filter can work 
with  Scheduling Rules , and give user more flexibility on Access  control. For Detail, please refer to 
Scheduling Rule . 
Each rule can be enabled or disabled individually. 
Inbound Filter:   
To enable...

 33
Example 2: 
 
 
 
(1.2.3.100-1.2.3.119) They can do everything except 
read net news (port 119) and transfer files via FTP 
(port 21) 
Others are all allowed. 
 
After  Inbound Packet Filter  setting is configured, click the  save button. 
 
Outbound Filter:   
To enable  Outbound Packet Filter  click the check box next to  Enable in the Outbound Packet Filter  
field. 
 
 
 
  

 34
Example 1: 
 
 
 
(192.168.1.100-192.168.1.149) They  are allowed to send mail (port 25), receive mail (port 110), and 
browse Internet (port 80); port 53 (DNS)  is necessary to resolve the domain name. 
 
(192.168.1.10-192.168.1.20) They c an do everything (block nothing)   
Others are all blocked.  

 35
Example 2: 
 
 
 
(192.168.1.100-192.168.1.119) They  can do everything except read net news (port 119) and transfer 
files via FTP (port 21) 
 
Others are allowed 
 
After  Outbound Packet Filter  setting is configured, click the  save button.  

 36
 
4.6.2 Domain Filter 
 
Domain Filter   
Let you prevent users under this devic e from accessing specific URLs.   
Domain Filter Enable 
Check if you want to enable Domain Filter.   
Log DNS Query 
Check if you want to log the action when someone accesses the specific URLs.   
Privilege IP Addresses Range 
Setting a group of hosts and privilege these host s to access network without restriction.   
Domain Suffix 
A suffix of URL to be restricted.  For example, .com, xxx.com.   
Action 
When someone...

 37
Example:
 
 
In this example: 
1. URL include “www.msn.com” will be blocked,
 and the action will be record in log-file. 
2. URL include “www.sina.com” will not be block ed, but the action will be record in log-file. 
3. URL include “www.google.com” will be blocked,  but the action will not be record in log-file. 
4. IP address X.X.X.1~ X.X.X.20 can access network without restriction.  
  

 38
4.6.3 URL Blocking 
 
URL Blocking will block LAN computers to co nnect to pre-defined Websites. 
The major difference between “Domain filter” and “URL  Blocking” is Domain filter require user to input 
suffix (like .com or .org, etc), while URL Blocking r equire user to input a keyword only. In other words, 
Domain filter can block specific website, while UR L Blocking can block hundreds of websites by simply 
a  keyword . 
 
URL Blocking Enable 
Checked if you want to enable URL Blocking.   
URL...