MSI Router RG54G3 User Manual

							 
26  (1.2.3.10-1.2.3.20) They can do everything (block nothing)  
 
Others are all blocked. 
Example 2: 
 
 
 
(1.2.3.100-1.2.3.119) They can do everything except read net news (port 119) and transfer files via FTP (port 21) 
Others are all allowed. 
 
After  Inbound Packet Filter  setting is configured, click the  save button. 
 
Outbound Filter:  
To enable  Outbound Packet Filter  click the check box next to  Enable in the Outbound Packet Filter  field.  
						

							 
27  Example 1: 
 
 
 
(192.168.1.100-192.168.1.149) They are allowed to send mail (port 25), receive mail (port 110), and browse Internet 
(port 80); port 53 (DNS) is necessary to resolve the domain name. 
 
(192.168.1.10-192.168.1.20) They can do everything (block nothing)  
Others are all blocked.  
						

							 
28  Example 2: 
 
 
 
(192.168.1.100-192.168.1.119) They can do everything except read net news (port 119) and transfer files via FTP 
(port 21) 
 
Others are allowed 
 
After  Outbound Packet Filter  setting is configured, click the  save button. 
 
  
						

							 
29  4.4.4 Domain Filtering 
 
Domain Filter  
Let you prevent users under this device from accessing specific URLs.  
Domain Filter Enable 
Check if you want to enable Domain Filter.  
Log DNS Query 
Check if you want to log the action when someone accesses the specific URLs.  
Privilege IP Addresses Range 
Setting a group of hosts and privilege these hosts to access network without restriction.  
Domain Suffix 
A suffix of URL to be restricted. For example, .com, xxx.com.  
Action 
When someone is accessing the URL met the domain-suffix, what kind of action you want. 
Check drop to block the access. Check log to log these access.  
Enable 
Check to enable each rule.   
						

							 
30  Example:
   
In this example: 
1.  URL include  “www.msn.com ” will be blocked, and the action will be record in log-file. 
2.  URL include  “www.sina.com ” will not be blocked, but the action will be record in log-file. 
3.  URL include  “www.google.com ” will be blocked, but the action will not be record in log-file. 
4.  IP address X.X.X.1~ X.X.X.20 can access network without restriction.   
  
						

							 
31  4.4.5 URL Filtering 
 
URL Blocking  will block LAN computers to connect to pre-defined Websites. 
The major difference between  “Domain filter ” and  “URL Blocking ” is Domain filter require user to input suffix 
(like .com or .org, etc), while URL Blocking require user to input a keyword only. In other words, Domain filter can 
block specific website, while URL Blocking can block hundreds of websites by simply a  keyword. 
 
URL Blocking Enable 
Checked if you want to enable URL Blocking.  
URL 
If any part of the Websites URL matches the pre-defined word, the connection will be blocked. 
For example, you can use pre-defined word sex to block all websites if their URLs contain pre-defined word sex.  
Enable 
Checked to enable each rule.  
						

							 
32    
In this example: 
1. URL include  “msn ” will be blocked, and the action will be record in log-file. 
2. URL include  “sina ” will be blocked, but the action will be record in log-file 
3. URL include  “cnnsi ” will not be blocked, but the action will be record in log-file. 
4. URL include  “espn ” will be blocked, but the action will be record in log-file  
 
 
 
 
 
 
 
 
 
 
  
						

							 
33  4.4.6 Routing Table 
 
 
Routing Tables  allow you to determine which physical interface address to use for outgoing IP data grams. If you 
have more than one routers and subnets, you will need to enable routing table to allow packets to find proper routing 
path and allow different subnets to communicate with each other. 
Routing Table settings are settings used to setup the functions of static.  
Static Routing : For static routing, you can specify up to 8 routing rules. You can enter the destination IP address, 
subnet mask, gateway, hop for each routing rule, and then enable or disable the rule by checking or unchecking the 
Enable checkbox.  
						

							 
34  Example: 
 
 
 
Configuration on NAT Router 
Destination           SubnetMask        Gateway         Hop        Enabled 
192.168.1.0          255.255.255.0     192.168.1.216       1             ˇ 
192.168.0.0          255.255.255.0     192.168.1.103       1             ˇ 
 
So if, for example, the client3 wanted to send an IP data gram to 192.168.0.2, it would use the above table to 
determine that it had to go via 192.168.1.103 (a gateway),  
And if it sends Packets to 192.168.1.11 will go via 192.168.1.216 
Each rule can be enabled or disabled individually. 
After  routing table  setting is configured, click the  save button.  
						

							 
35  4.4.7 Schedule Rule 
 
You can set the schedule time to decide which service will be turned on or off. Select the  “enable ” item. 
Press  “Add New Rule ” 
You can write a rule name and set which day and what time to schedule from  “Start Time ” to  “End Time ”. The 
following example configure  “ftp time ” as everyday 14:10 to 16:20