ZyXEL Communications P-2302HW manual Filter to block web services, Prestige 2302 Support Notes

Prestige 2302 Support Notes

allowed in the pre-ZyNOS v3.40 firmware. Thus when you upgrade the firmware to ZyNOS v3.40, the old configuration is translated to the new format and any filter configuration inconsistence is logged. It is highly recommended that you check the system log (in SMT menu 24.3.1) before setting up the device on the network.

Note: The Prestige automatically deactivates the routing/bridging functions when an inconsistency is detected in the filter rule settings.

Filter to block web services

•Configuration

Before configuring a filter, you need to know the following information:

1.The outbound packet type (the protocol and port number)

2.The source IP address

Generally, the outbound packets for a web service could be as follows:

a. HTTP packet, TCP (06) protocol with port number 80 b. DNS packet, TCP (06) protocol with port number 53 or c. DNS packet, UDP (17) protocol with port number 53

To block web services on all LAN hosts, enter 0.0.0.0 for the source IP address. Otherwise enter the IP address of a LAN computer to block web services for that computer. The configuration procedure is described below.

oCreate a filter set in SMT menu 21, for example, set 1

oCreate three filter rules in menu 21.1.1, 21.1.2, and 21.1.3

ƒRule 1- block the HTTP packets, TCP (06) protocol type with port number 80

ƒRule 2- block the DNS packets, TCP (06) protocol type with port number 53

ƒRule 3- block the DNS packets, UDP (17) protocol type with port number 53 o Apply the filter set in menu 4

1.Create a filter set in menu 21

Menu 21 - Filter Set Configuration

Filter Filter

23

All contents copyright (c) 2005 ZyXEL Communications Corporation.