ZyXEL Communications P-2302HW A filter to block NetBIOS packets, Prestige 2302 Support Notes

Prestige 2302 Support Notes

More= No Log= None

Action Matched= Drop

Action Not Matched= Forward

You can now apply the generic filter rule set in SMT Menu 3.1 - General Ethernet Setup. Note that you can only select 'Generic Filter' in the 'Device Filter' field, but not in the 'Protocol Filter' field which allows you to apply the TCPIP and IPX filters.

Menu 3.1 - General Ethernet Setup

Input Filter Sets:

protocol filters= device filters= 1

Output Filter Sets: protocol filters= device filters=

A filter to block NetBIOS packets

•Introduction

The NETBIOS protocol allows the sharing of Microsoft computers in a workgroup. For security reasons, the Prestige blocks NetBIOS connections from the outside by default. To enable the NetBIOS service, remove the filter sets applied in SMT menus 3.1 and 4.1. The details of the filter settings are described as follows.

•Configuration

The following lists the packets that are blocked. Configure the rules in the filter set in SMT menu 21.

Filter Set 1:

oRule 1-Destination port number 137 with protocol number 6 (TCP) o Rule 2-Destination port number 137 with protocol number 17 (UDP)

32

All contents copyright (c) 2005 ZyXEL Communications Corporation.