TRENDnet S4W1CA manual Firewall, Discard PING from WAN side, Client Filtering

Page 18
2-5 Firewall

2-5 Firewall

The Broadband Router provides extensive firewall protection by restricting connection parameters to limit the risk of hacker attacks and by defending against a wide array of common hacker attacks.

The Broadband Router provides packet filtering rules by restricting service ports, IP address or MAC address. However, for applications that require unrestricted access to the Internet, you may configure a specific client/server as a demilitarized zone (DMZ).

2-5-1 Discard PING from WAN side

When "Discard Ping from WAN side" is checked, it is causes the public WAN IP address on the Broadband Router to ignore ping commands. Pinging public WAN IP addresses is a common method used by hackers to test whether the WAN IP address is valid.

2-5-2 Client Filtering

To block certain client PCs from accessing the Internet:

You can filter Internet access for local clients based on IP addresses, application types, (i.e., HTTP port), and time of day.

For example, this screen shows that clients in the address range 192.168.0.50-99 are permanently restricted from using FTP (Port 21), while clients in the address range 192.168.0.110-119 are blocked from browsing the Internet (port 80) from Monday to Friday and from 0:00AM to 11:00 PM.

Example:

2-5-3 MAC Address Control

MAC Address Control allows you to block certain client PCs from accessing the Internet based on MAC addresses.

31

 

32

Image 18
Contents FCC Warning CE Mark WarningVCCI Warning TABLE OF CONTENTS ABOUT THIS GUIDE Resource sharing Broadband Internet access sharingINTRODUCTION File sharingUNPACKING AND SETUP RESET HARDWARE INSTALLATION4-Port 10/100Mbps Ethernet Broadband Router Front Panel POWER STATUSCheck the installation Connect the Internet Broadband RouterPC NETWORK TCP/IP SETTING 1. Right click My Network Places and select Properties INTERNET BROADBAND ROUTER CONFIGURATION 1-2-1 Dynamic IP Cable Modem The MTU feature specifies the largest packet size permitted forThe Maximum Idle Time feature can If required by your ISP, input a host name and MAC address1-3 DNS Advanced Setup2-1-2 Administrator Settings Password Settings addressesRestore Factory Default 2-1-3 Firmware Upgrade2-1-4 Configuration Tools Backup Settings2-2-1 Dynamic IP 2-1-7 Reset 2-2 WANIf your ISP is BigPond Australia, check the Enable box 2-2-2 Static IPSelect a Dynamic DNS service provider from the dropdown list Use Dynamic DNS Check this option to enable Dynamic DNSService Provider 2-2-4 PPTPEnter the password provided by your Dynamic DNS service provider Enter the username provided by your Dynamic DNS service providerPassword 2-3 LAN To set the LAN’s IP Address 2-3-1 LAN SettingsExample 2-5-1 Discard PING from WAN side To block certain client PCs from accessing the Internet2-5 Firewall 2-5-2 Client FilteringTECHNICAL SPECIFICATIONS LIMITED WARRANTY TW100-S4W1CAFive years