Intel 9535, 9515, 9525 manual Filter Function, Transmit Tx Filters on LAN1 Settings

Page 20

DMZ Firewall Solution for the Express Router

Filters are defined as follows:

Filter Function

Prohibit internal users access to the Internet

1Allows access to the HTTP /FTP proxy server on the DMZ.

2Allows access to the SMTP server on the DMZ.

3Allows access to News (proxy) server on the DMZ.

4Allows access to the router from the private LAN.

4.4.1.2 Transmit (Tx) Filters on LAN1

Settings

Default Action:

Default

 

 

Action:

Pass

Protocol:

All

Dest. address type:

Host

Dest. address:

193.84.251.2

Src. address type:

All

Action:

Pass

Protocol:

All

Dest. address type:

Host

Dest. address:

193.84.251.3

Src. address type:

all

Action:

Pass

Protocol:

All

Dest. address type:

Host

Dest. address:

193.84.251.4

Src. address type:

All

Action:

Pass

Protocol:

All

Dest. port address:

Host

Dest. address:

<LAN1 IP address>

Scr. address type:

All

Configure these transmit filters for the LAN1 port, shown as they appear in Advanced Setup.

Filters are defined as follows:

Filter Function

Prohibit users on the private network from accessing the Internet

1Allows HTTP and FTP (read only using HTTP) from secure LAN to HTTP/FTP proxy server on the DMZ.

Settings

Default Action:

Discard

 

 

Action:

Pass

Protocol:

TCP

TCP flags:

ACK

Dest. address type:

All

Dest port:

>1023

Src. address type:

Host

Src. address:

193.84.251.2

07-12-99

Version 1.0

19

Image 20
Contents DMZ Firewall Solution Copyright 1999, Intel Corporation. All rights reserved Table of Contents What is a DMZ IntroductionAbout This Document ReferencesIP Address Selection General Setup and ConsiderationsIP Filters in the Express Router Routing Setup DNS SetupMail Smtp Setup FTP SetupNetwork Address Translation NAT Setup DMZ Single IP Address SolutionStatic Routing Setup IP Filters Setup SettingsEntry Function Receive Rx Filters on LAN1Filter Function Transmit Tx Filters on LAN1Src. address 10.2.0.2 Src. port Action Pass Protocol 2 LAN2 Filters Receive Rx Filters on LAN2Filter Function Settings RIPTransmit Tx filters on LAN2 Settings Internet Connection Filters Receive Rx Filters on the connection to the InternetAction Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet DMZ Multiple IP Address Solution IP Address AssignmentNetwork Address Translation NAT Transmit Tx Filters on LAN1 Settings Src. port Action Pass Protocol Dest. address type All Dest port Src. address type All Src. port Action Discard Protocol Action Discard Protocol Transmit Tx filters on LAN2 Src. port 1023 Action Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet