Intel 9515 Benutzerhandbuch

DMZ Firewall Solution for the Express Router

07-12-99 Version 

1.0

12

Scr. address type:

Host

Src. address:

<LAN1 IP address>

Src. port :

All

9

Discards all ICMP packets entering the
DMZ network. This prevents the router
from reporting the IP netmask.

Action:

Discard

Protocol:

ICMP

Dest. address type:

All

Scr. address type:

All

10

Discards all packets to open router
ports.

Four filters are required.

Action:

Discard

Protocol:

UDP

Dest. address type:

Host

Dest. address:

<LAN1 IP address>

Dest. port:

All

Src. address type:

All

Src. port:

All

11

Action:

Discard

Protocol:

UDP

Dest. address type:

Host

Dest. address:

<LAN2 IP address>

Dest. port:

All

Src. address type:

All

Src. port:

All

12

Action:

Discard

Protocol:

TCP

Flags:

All

Dest. address type:

Host

Dest. address:

<LAN1 IP address>

Dest. port:

All

Src. address type:

All

Src. port:

All

13

Action:

Discard

Protocol:

TCP

flags:

All

Dest. address type:

Host

Dest. address:

<LAN2 IP address>

Dest. port:

All

Src. address type:

All

Src. port:

All

To pass all packets transmitted from the DMZ, set the default action to Pass.