Firewallrule - Revision history

WFilter at 09:01, 20 January 2022

2022-01-20T09:01:48Z

2019-11-12T04:27:40Z

2019-10-31T07:43:16Z

‎Advanced Settings

2019-10-31T07:43:05Z

2018-05-19T02:57:37Z

2017-06-20T15:35:03Z

2017-06-20T15:34:44Z

2017-05-14T15:02:37Z

2017-05-14T15:01:14Z

2017-05-14T15:00:36Z

@@ Line 12: / Line 12: @@
 ** "Inbound", packet targets to the NGF device.
 ** "Forward", packet being forwarded.
-* '''Source IP''': packet source ip address. You can define IP as "Any", "Single", "Range" and "Customize".
+* '''Source''': packet source. You can define IP as "Any", "Single", "Range" and "Customize".
 ** For "Single", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
 ** For "Range", you need to input an ip range.
-* '''Target IP''': packet target ip address, can be "Any", "Single", "Range" and "Customize".
+* '''Target''': packet target, can be "Any", "Single", "Range" and "Customize".
 * '''Target Port''': packet target port, can be a single port or a port range, Syntax:
 ** One port: 8000
@@ Line 21: / Line 22: @@
 ** Multiple ports: 80 8000
 ** Port and ranges: 80 8000:9000
 * '''Protocol'''
 ** All: means all protocols, including TCP, UDP, ICMP and other IP protocols.
@@ Line 49: / Line 51: @@
 *.imfirewall.com
 == Processing Order for Rules ==

@@ Line 12: / Line 12: @@
 ** "Inbound", packet targets to the NGF device.
 ** "Forward", packet being forwarded.
-* '''Source IP''': packet source ip address. You can define IP as "Any", "Single" and "Range".
+* '''Source IP''': packet source ip address. You can define IP as "Any", "Single", "Range" and "Customize".
 ** For "Single", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
 ** For "Range", you need to input an ip range.
@@ Line 30: / Line 30: @@
 * You may use '''time''', '''from-to''' and '''effective on''' to define a time period for this rule to be applied.
-== Customize Target IP ==
+== Customize IP ==
-Upon "Customize", you can block ip, subnets, domains and domain categories. For domains, WFilter will add dns replied ip addresses into the deny/allow list.
+Upon "Customize", you can block ip, subnets, countries and regions, domains and domain categories. For domains, WFilter will add dns replied ip addresses into the deny/allow list.
 [[File: ros_firewall_dstip01.png|650px]]
@@ Line 39: / Line 39: @@
 [[File: ros_firewall_dstip03.png|650px]]
 IP, subnet or domain per line, for example:

← Older revision		Revision as of 07:43, 31 October 2019
Line 57:		Line 57:
	== Advanced Settings ==		== Advanced Settings ==

−	~~高级设置可以设置“区域”的默认安全策略、网段、NAT转换等配置，默认支持“内网”和“外网”两个区域。如下图：~~
	In "Advanced Settings", you can setup default policies for ZONEs. Two Zones(LAN and WAN) are supported in default.		In "Advanced Settings", you can setup default policies for ZONEs. Two Zones(LAN and WAN) are supported in default.

@@ Line 15: / Line 15: @@
 ** For "Single", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).
 ** For "Range", you need to input an ip range.
-* '''Target IP''': packet target ip address, same syntax as the "Source IP".
+* '''Target IP''': packet target ip address, can be "Any", "Single", "Range" and "Customize".
 * '''Target Port''': packet target port, can be a single port or a port range, Syntax:
 ** One port: 8000
@@ Line 29: / Line 29: @@
 ** "Allow": allow packet
 * You may use '''time''', '''from-to''' and '''effective on''' to define a time period for this rule to be applied.
 == Processing Order for Rules ==
@@ Line 38: / Line 56: @@
 == Advanced Settings ==
-* '''Drop Invalid Packets'''.
+高级设置可以设置“区域”的默认安全策略、网段、NAT转换等配置，默认支持“内网”和“外网”两个区域。如下图：
-* '''SYN Flood Protection''': Kind of DDos attack.
+In "Advanced Settings", you can setup default policies for ZONEs. Two Zones(LAN and WAN) are supported in default.
-* '''Allow Ping on WAN Interfaces''': Allow ICMP ping to the WAN interface from external network.
-[[File: Firewall_advanced_en.jpg|400px]]
+[[File: Firewall_advanced_en02.png|600px]]
 [[Category:Firewall]]

@@ Line 21: / Line 21: @@
 ** Multiple ports: 80 8000
 ** Port and ranges: 80 8000:9000
 * '''Action''':
 ** "Reject": the rejected clients will get a RST packet immediately.

@@ Line 8: / Line 8: @@
 New a firewall rule, descriptions:
-* '''Interface''': "LAN" or "WAN". Please note that WAN interface is invalid in bridge mode.
+* '''Interface''': "LAN" or "WAN". WAN interface is invalid in bridge mode.
 * '''Type''': packet direction.
 ** "Inbound", packet targets to the NGF device.

@@ Line 4: / Line 4: @@
 == New Rule ==
-[[File: Firewall_set_en.jpg|650px]]
+[[File: Firewall_set_en.png|650px]]
 New a firewall rule, descriptions:
 * '''Interface''': "LAN" or "WAN", "Forwarded traffic" from this interface will be applied with this rule.
 * '''Source IP''': packet source ip address. You can define IP as "Any", "Single" and "Range".
 ** For "Single", a single ip or subnet is allowed(for example: 192.168.1.10 or 192.168.1.0/24).