Incoming access – administration services
The following figure shows the incoming access configuration page:
Figure 6.1 Incoming access configuration
By default the SnapGear appliance runs a web administration server and a telnet service. Access to these services can be restricted to specific interfaces. For example, you may want to restrict access to the SnapGear appliance’s configuration web pages (Web Admin) to machines on your local network. SnapGear does not recommend disallowing all services, as this will make future configuration changes impossible unless your SnapGear appliance is reset to the factory default settings.
You can also select the ICMP messages accepted on the Internet interface. For example, if you disallow echo requests (the default for increased security), your SnapGear appliance will not respond to pings on its Internet interface. Destination unreachable ICMP messages are always accepted.
59
Firewall