NetComm NB712 Filtering Rule for Smtp connection, Filtering rule will be conﬁgured as follow

Page 53

Filtering Rule for SMTP connection

Filtering rule will be conﬁgured as follow

Index	Protocol	Direction	Action	Source	Destination	Dest. Port	Schedule

1	TCP	Inbound	Permit	External	Internal	25	Always

2	TCP	Outbound	Permit	Internal	External	>1023	Always

3	TCP	Outbound	Permit	Internal	External	25	Always

4	TCP	Inbound	Permit	External	Internal	>1023	Always

5	Any	Either	Deny	Any	Any	Any	Always

Packet	Direction	Source	Destination	Protocol	Dest. Port	Action (Rule)

1	Inbound	192.168.3.4	172.16.1.1	TCP	25	Permit (A)

2	Outbound	172.16.1.1	192.168.3.4	TCP	1234	Permit (B)

Packet	Direction	Source	Destination	Protocol	Dest. Port	Action (Rule)

3	Outbound	172.16.1.1	192.168.3.4	TCP	25	Permit (C)

4	Inbound	192.168.3.4	172.16.1.1	TCP	1357	Permit (D)

Packet	Direction	Source	Destination	Protocol	Dest. Port	Action (Rule)

5	Inbound	10.1.2.3	171.16.3.4	TCP	6000	Deny (E)

6	Outbound	171.16.3.4	10.1.2.3	TCP	5150	Deny (E)

NB712 /	NB714 User Guide	53
YML829	Rev1

Image 53

Contents Page Contents NB714 User Guide Introduction FeaturesPackage Contents Routing SpeciﬁcationBridging SecurityATM QoS IndicatorsAAL5 Encapsulation WAN InterfacePhysical/Electrical ApplicationMemory Product InformationFirewall There are three types of ﬁrewall Types of FirewallPacket Filtering Application Gateway Denial of Service AttackCircuit Gateway SYN Flood Ping of deathIcmp Flood UDP FloodFrame Speciﬁcation Vlan Virtual Local Area NetworkVID uniquely identiﬁes the Vlan to which the frame belongs ApplicationsLED status Getting to know the routerFront Panel LAN 1,2,3,4 Rear PanelCheck the Terminal Access Program Connecting your G.SHDSL Modem RouterDetermine Connection Setting Check the Ethernet Adapter in PCBridge EoA Route EoA IPoA PPPoA PPPoE Install the Shdsl RouterCross-over Ethernet cables can be used Port router with network topologyConﬁguration via Web Browser Router, which will lose any previous conﬁguration Click Basic for basic installation Basic SetupSystem error or disconnection Enter Host Name Bridge ModeLAN Parameters Enter VPI Enter VCI Click LLC Click Next WAN1 ParametersRouting Mode LAN IP Type Click Next to setup WAN1 parametersDhcp Client IP type Dhcp ServerIP Address Subnet MaskDNS Server Trigger Dhcp ServiceRelay Dhcp relayAAL5 Encap PPPoE or PPPoAProtocol For more information, refer to the section on NAT/DMZPassword Conﬁrm PasswordUsername Idle TimeEprom Gateway IPoA or EoAEprom Advanced Setup Link Type Annex TypeData rate Data RateMargin range is from 0 to Shdsl SNR marginMargin, the better the line connection Reconnect for better line connectionWAN UBR Unspeciﬁed Bit Rate QoS Quality of ServiceCBR Constant Bit Rate PCR Peak Cell Rate in kbpsBridge Eprom Vlan Packets PvidRoute RIP ModeAuto RIP Summary Press ModifyPoison Reverse Authentication requiredRIP Version NAT/DMZ Multi-NAT Multi-DMZVirtual Start IP Address Count Global Start IP AddressVirtual Server Basic Firewall Security FirewallAutomatic Firewall Security Click Advanced Firewall Security and then press Finish Advanced Firewall Security SYN Attack Connections and will be unresponsivePing of death attack attempts to crash your system by Addresses originating from your networkDescription DirectionSrc. IP Address Dest. IP AddressFiltering rule will be conﬁgured as follow Filtering Rule for Smtp connectionFiltering Result Update Filtering Rule10.0.0.0 172.16.6.0 Permit 10.1.99.0 172.16.0.0 Deny Any When the rule is ordered as ABCRule Order IP QoS NB714 User Guide Administration Security NB712 / NB714 User Guide MIB SnmpCommunity Snmp statusVersion Community Click on Time Sync Time SyncTime Zone Sntp serviceTime Server Utility System Info Backup Conﬁguration Restore Conﬁguration10.2 Conﬁg Tool Lose all the conﬁgured parametersUpgrade To logout the router, press logout LogoutRestart You can monitor the following StatusLAN Parameters LAN-to-LAN connection with bridge ModeCO side Enter IP 192.168.1.1 Enter Subnet Mask WAN1 ParametersEnter Gateway 192.168.1.1 Enter Host Name Enter VPI Enter VCI EncapVCI32 EncapLLC CPE SideHost Name Enter Soho Dhcp Service LAN to LAN Connection with Routing ModeClick Route and CO Side then press Next IP Address 192.168.20.1 Subnet Mask 255.255.255.0 Host NameWAN Parameters Click Next to setup the IP parametersIP Address 192.168.10.1 Subnet Mask 255.255.255.0 Host Name Click Route and CPE Side then press Next192.168.30.2 Serial Console Useradmin PasswordTelnet Baudrate 9600 Data Bits Parity Check Stop Bits Flow-controlOperation Interface Window structure Ctrl + C To quit the conﬁguring item Ctrl + Q For help Menu Driven Interface CommandsTo choose another parameters Menu Tree 14.7 Conﬁguration Done via utility command Ping Packet internet groper command AdminUtility Exit Quit systemStatus System ShowConﬁg ScriptAdministration RebootWrite PingUser Proﬁle Edit Community Entry List Show SnmpSupervisor Password and ID Sntp Move the cursor to service and press enterMove the cursor to sntp and press enter Move the cursor to timeserver1 and press enterMove the cursor to list and review the setting Utility SetupExit ModeShdsl 14.16.3 WAN After enter add menu, the screen will prompt as follow BridgeMove the cursor to vlan and press enter VlanFor each VLAN, Vlan ID is a unique number among 1~4095 14.16.6 802.11Q VlanFollow the following steps to conﬁgure 802.11q Vlan You can review the list of RIP parameters via list command Generic command can setup RIP mode and auto summery modeRoute Screen will display the followingIP share 14.16.8 LANYou can conﬁgure NAT parameters in nat menu 14.16.10 NATMapping After key in enter, the screen will prompt as below 14.16.11 PATﬁrewall security level can conﬁgure via level command You can enable the demilitarized zone via active command14.16.12 DMZ FirewallActive DoS Protection IPQoS Dhcp You can view the Dhcp conﬁguration via list commandHost name DefaultDNS proxy RJ-45 Network Ports Appendix a Cable Information10Mbps 100MbpsCross-Over Cabling Straight and crossover cable conﬁgurationStraight-Through Cabling No connection Shdsl Line Connector Console CableRxD O TxDContact Information Appendix B Registration and Warranty InformationProduct Warranty