Sagem 1500 用户手册
4 - Configuring the SAGEM F@st™ 1500 ADSL router
SAGEM F@st™ 1500 Reference Manual - 288053220-04
Reproduction and communication prohibited without the written permission of
E
E
E
E
Page 4-45
When particular types of traffic are checked, only the particular type of traffic initiated from the
internal LAN will be allowed. For example, if the user only checks “FTP Service” in the Stateful
Packet Inspection section, all incoming traffic will be blocked except for FTP connections
initiated from the local LAN.
internal LAN will be allowed. For example, if the user only checks “FTP Service” in the Stateful
Packet Inspection section, all incoming traffic will be blocked except for FTP connections
initiated from the local LAN.
Stateful Packet Inspection allows you to select different application types that are using dynamic
port numbers. If you wish to use the Stateful Packet Inspection (SPI) to block packets, click on
the Yes radio button in the “Enable SPI and Anti-DoS firewall protection” field and then check
the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP
Session, FTP Service, H.323 Service, or TFTP Service.
port numbers. If you wish to use the Stateful Packet Inspection (SPI) to block packets, click on
the Yes radio button in the “Enable SPI and Anti-DoS firewall protection” field and then check
the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP
Session, FTP Service, H.323 Service, or TFTP Service.
3) When hackers attempt to enter your network, we can alert you by e-mail
Enter your email address.
Specify your SMTP and POP3 servers, user name, and password.
4) Connection Policy
Enter the appropriate values for TCP/UDP sessions as described in the following table.
Parameter
Defaults
Description
Fragmentation
half-open wait
half-open wait
10 sec
Configures the number of seconds that a packet state structure
remains active. When the timeout value expires, the router drops
the unassembled packet, freeing that structure for use by another
packet.
remains active. When the timeout value expires, the router drops
the unassembled packet, freeing that structure for use by another
packet.
TCP SYN wait
30 sec
Defines how long the software will wait for a TCP session to
synchronize before dropping the session.
synchronize before dropping the session.
TCP FIN wait
5 sec
Specifies how long a TCP session will be maintained after the
firewall detects a FIN packet.
firewall detects a FIN packet.
TCP connection
idle timeout
idle timeout
3600 seconds
(1 hour)
(1 hour)
The length of time for which a TCP session will be managed if there
is no activity.
is no activity.
UDP session
idle timeout
idle timeout
30 sec
The length of time for which a UDP session will be managed if
there is no activity.
there is no activity.
H.323 data
channel idle
timeout
channel idle
timeout
180 sec
The length of time for which an H.323 session will be managed if
there is no activity.
there is no activity.