Intel 9525 Transmit Tx filters on LAN2, Receive Rx Filters on the Connection to the Internet

Page 25

DMZ Firewall Solution for the Express Router

4.4.2.2 Transmit (Tx) filters on LAN2

Set the default action to Pass.

4.4.3 Internet Connection Filters

4.4.3.1 Receive (Rx) Filters on the Connection to the Internet

The required receive filters for the Internet connection, shown as they appear in Advanced Setup.

⋅

Filters are defined as follows:

Filter Function

—Prohibit users on the secure network from accessing the Internet

1Allows HTTP from the Internet to the HTTP/FTP server on the DMZ.

Settings

Default Action:	Discard

Action:	Pass
Protocol:	TCP
TCP flags:	All
Dest. address type:	Host
Dest. address:	193.84.251.1
dest port:	= 80
Src. address type:	All

07-12-99

Version 1.0

24

Image 25

Contents DMZ Firewall Solution Copyright 1999, Intel Corporation. All rights reserved Table of Contents Introduction What is a DMZAbout This Document ReferencesIP Filters in the Express Router General Setup and ConsiderationsIP Address Selection DNS Setup Routing SetupMail Smtp Setup FTP SetupStatic Routing Setup DMZ Single IP Address SolutionNetwork Address Translation NAT Setup Settings IP Filters SetupEntry Function Receive Rx Filters on LAN1Transmit Tx Filters on LAN1 Filter FunctionSrc. address 10.2.0.2 Src. port Action Pass Protocol Receive Rx Filters on LAN2 2 LAN2 FiltersRIP Filter Function SettingsTransmit Tx filters on LAN2 Settings Receive Rx Filters on the connection to the Internet Internet Connection FiltersAction Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet IP Address Assignment DMZ Multiple IP Address SolutionNetwork Address Translation NAT Transmit Tx Filters on LAN1 Settings Src. port Action Pass Protocol Dest. address type All Dest port Src. address type All Src. port Action Discard Protocol Action Discard Protocol Transmit Tx filters on LAN2 Src. port 1023 Action Pass Protocol UDP Transmit Tx Filters on the Connection to the Internet