3.4.5 DMZ

If you have a local client PC that cannot run an Internet application (e.g. Games) properly from behind the NAT firewall, then you can open the client up to unrestricted two-way Internet access by defining a DMZ Host. The DMZ function allows you to re-direct all packets going to your WAN port IP address to a particular IP address in your LAN. The difference between the virtual server and the DMZ function is that the virtual server re-directs a particular service/Internet application (e.g. FTP, websites) to a particular LAN client/server, whereas DMZ re-directs all packets (regardless of services) going to your WAN IP address to a particular LAN client/server.

Parameters

Description

Enable

Enable/disable DMZ

Public IP Address

The IP address of the WAN port or any other Public IP

 

addresses given to you by your ISP

IP Address of Virtual DMZ

Input the IP address of a particular host in your LAN that will

 

receive all the packets originally going to the WAN port/Public IP

 

address above.

Action

Press <Add> to add DMZ rule.

3.5 Firewall

XRT-401E provides extensive firewall protection by restricting connection parameters, thus limiting the risk of hacker attack, and defending against a wide array of common Internet attacks.

Parameters

Description

2.5.1 Firewall Options

XRT-401E's firewall can block common hacker attacks and can

 

log the attack activities.

2.5.2 Client Filtering

Client Filtering allows you to specify which hosts users can or

 

cannot access to certain Internet applications by IP address.

38