Intel 9515 Benutzerhandbuch

DMZ Firewall Solution for the Express Router

07-12-99 Version 

1.0

8

Filters are defined as follows:

—

Prohibit users on the secure network
access to the Internet

Default Action:

Discard

1

Allows access to the HTTP /FTP
proxy server on the DMZ.

Action:

Pass

Protocol:

All

Dest. address type:

Host

Dest. address:

10.2.0.2

Src. address type:

All

2

Allows access to the SMTP server on
the DMZ.

Action:

Pass

Protocol:

All

Dest. address type:

Host

Dest. address:

10.2.0.3

Src. address type:

All

3

Allows access to News (proxy) server
on the DMZ.

Action: Pass
Protocol:

All

Dest. address type:

Host

Dest. address:

10.2.0.4

Src. address type:

All

4

Allows access to the router from the
private LAN.

Action:

Pass

Protocol:

All

Dest. port address:

Host

Dest. address:

<LAN1 IP address>

Scr. address type:

All

Configure these transmit filters for the LAN1 port, shown as they appear in Advanced Setup.

Filters are defined as follows:

—

Prohibit users on the secure network
access to the Internet

Default Action:

Discard

1

Allows HTTP and FTP (read only using
HTTP) from secure LAN to HTTP/FTP
proxy server on the DMZ.

Action:

Pass

Protocol:

TCP

TCP flags:

ACK

Dest. address type:

All

Dest. port:

>1023

Src. address type:

Host