Farallon Communications R9100 Manual Do Utilizador

13-18 User’s Reference Guide

The five input filters and one output filter that make up Basic Firewall are shown in the table below.

Basic Firewall’s filters play the following roles.

Input filters 1 and 2: These block WAN-originated OpenWindows and X-Windows sessions. Ser vice origination
requests for these protocols use por ts 2000 and 6000, respectively. Since these are greater than 1023,
OpenWindows and X-Windows traffic would other wise be allowed by input filter 4. Input filters 1 and 2 must
precede input filter 4; other wise they would have no effect since filter 4 would have already passed
OpenWindows and X-Windows traffic.

Input filter 3: This filter explicitly passes all WAN-originated ICMP traffic to permit devices on the WAN to ping
devices on the LAN. Ping is an Internet ser vice that is useful for diagnostic purposes.

Input filters 4 and 5: These filters pass all TCP and UDP traffic, respectively, when the destination por t is
greater than 1023. This type of traffic generally does not allow a remote host to connect to the LAN using one
of the potentially intrusive Internet ser vices, such as Telnet, FTP, and WWW.

Output filter 1: This filter passes all outgoing traffic to make sure that no outgoing connections from the LAN
are blocked.

Setting

Input filter

Output

filter 1

Enabled

Yes

For ward

Yes

Source IP
address

0.0.0.0

Source IP
address mask

0.0.0.0

Dest. IP
address

0.0.0.0

Dest. IP
address mask

0.0.0.0

Protocol type

TCP

ICMP

TCP

UDP

Source por t
comparison

No
Compare

N/A

No
Compare

N/A

Source por t ID

N/A

Dest. por t
comparison

Equal

N/A

Greater
Than

N/A

Dest. por t ID

2000

6000

N/A

1023

N/A