Intel 9525, 9515, 9535 manual Udp

Page 16

DMZ Firewall Solution for the Express Router

Filter Function

9Allows DNS reply to the HTTP/FTP proxy server on the DMZ.

Two filters are required.

10

11Allows DNS reply to the SMTP server on the DMZ.

Two filters are required.

12

13Allows incoming mail (SMTP) from any host on the Internet to the DMZ.

14Allows outgoing mail (SMTP) to any host on the Internet from the DMZ.

Settings

Dest. address:

10.2.0.2

Dest. port

> 1023

Src. address type:

All

Src. port:

> 1023

Action:

Pass

Protocol:

TCP

TCP flags:

ACK

Dest. address type:

Host

Dest. address:

10.2.0.2

Dest. port

> 1023

Src. address type:

Host

Src. address:

194.25.6.4

Src. port:

= 53

Action:

Pass

Protocol:

UDP

Dest. address type:

Host

Dest. address:

10.2.0.2

Dest. port

> 1023

Src. address type:

Host

Src. address:

194.25.6.4

Src. port:

= 53

Action:

Pass

Protocol:

TCP

TCP flags:

ACK

Dest. address type:

Host

Dest. address:

10.2.0.3

Dest. port

> 1023

Src. address type:

Host

Src. address:

194.25.6.4

Src. port:

= 53

Action:

Pass

Protocol:

UDP

Dest. address type:

Host

Dest. address:

10.2.0.3

Dest. port

> 1023

Src. address type:

Host

Src. address:

194.25.6.4

Src. port:

= 53

Action:

Pass

Protocol:

TCP

TCP flags:

All

Dest. address type:

Host

Dest. address:

10.2.0.3

Dest. port

= 25

Src. address type:

All

Src. port:

> 1023

Action:

Pass

Protocol:

TCP

TCP flags:

ACK

07-12-99

Version 1.0

15

Page 15 Page 17
Image 16
Page 15 Page 17
Contents DMZ Firewall Solution Copyright 1999, Intel Corporation. All rights reserved Table of Contents What is a DMZ IntroductionAbout This Document ReferencesIP Filters in the Express Router General Setup and ConsiderationsIP Address Selection Routing Setup DNS SetupMail Smtp Setup FTP SetupStatic Routing Setup DMZ Single IP Address SolutionNetwork Address Translation NAT Setup IP Filters Setup SettingsEntry Function Receive Rx Filters on LAN1Filter Function Transmit Tx Filters on LAN1Src. address 10.2.0.2 Src. port Action Pass Protocol 2 LAN2 Filters Receive Rx Filters on LAN2Filter Function Settings RIPTransmit Tx filters on LAN2 Settings Internet Connection Filters Receive Rx Filters on the connection to the InternetAction Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet DMZ Multiple IP Address Solution IP Address AssignmentNetwork Address Translation NAT Transmit Tx Filters on LAN1 Settings Src. port Action Pass Protocol Dest. address type All Dest port Src. address type All Src. port Action Discard Protocol Action Discard Protocol Transmit Tx filters on LAN2 Src. port 1023 Action Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet
Top Page Image Contents