D-Link DSL-500G manual IP Filter Configuration

DSL-500G ADSL Router User’s Guide

Host IP Address: The IP address of the computer that sent the packet(s) that caused the violation

Reason: A short description of the type of violation. If the packet violated an IP Filter rule, the custom text from the Log Tag field will display.

IPF Rule ID: If the packet violated an IP Filter rule, this field will display the ID assigned to the rule.

The IP filter feature enables you to create rules that control the forwarding of incoming and outgoing data between your LAN and the Internet and within your LAN. This topic explains how to create IP filter rules.

IP Filter

The IP Filter Configuration page displays global settings that you can modify, and the IP Filter rule table, which shows all currently established rules.

Figure 24. IP Filter Configuration

The IP Filter Configuration page enables you to configure the following IP filter global settings.

Security Level: This setting determines which IP Filter rules take effect, based on the security level specified in each rule. For example, when High is selected, only those rules that are assigned a security value of High will be in effect. The same is true for the Medium and Low settings. When None is selected, IP Filtering is disabled.

Private/Public/DMZ Default Action: This setting specifies a default action to be taken (Accept or Deny) on private, public, or DMZ-type device interfaces when they receive packets that do not match any of the filtering rules. You can specify a different default action for each interface type. (You specify an interface's type when you create the interface; see the PPP configuration page, for example.)

•A public interface typically connects to the Internet. PPP, EoA, and IPoA interfaces are typically public. Packets received on a public interface are subject to the most restrictive set of firewall protections defined in the software. Typically, the global setting for public interfaces is Deny, so that all accesses to your LAN initiated from external computers are denied (discarded at the public interface), except for those allowed by a specific IP Filter rule.

38