150
User
Manual
GWG Gateway
Firewall is configured in following way:
1.
Telnet traffic is denied
Select predefined rule number 3. Configuration page like on picture below is shown.
Figure
142
– Filtering of Telnet traffic
ENABLE option should be selected to have this rule active. To deny Telnet traffic POLICY should be
changed from ACCEPT to REJECT (ICMP error message type can be selected when policy reject is selected).
After that SAVE button should be pressed and user is returned to main configuration page.
2.
ICMP traffic is denied from all IP addresses except 212.62.38.196
New rule should be added by selecting ADD NEW RULE button. Policy should be configured in
following way:
-
Rule name: Deny PING to ppp_0 interface
-
Enable: selected
-
Chain: INPUT
-
Service: Custom
-
Protocol: ICMP
-
ICMP-Type: echo-request
-
Input interface: ppp_0
-
Source address: Single IP ; 212.62.38.196
-
Inverted source address rule logic: selected
-
Destination address: Any
-
Packet state: NEW
-
Policy: REJECT
-
Reject-with: icmp-port-unreachable
Configuration should be like on the picture below.
Figure
143
– Filtering of ICMP traffic
After configuration is finished SAVE button should be selected and user is returned to main
configuration page.
Priority of rule
is changed by selecting number in drop-down menu. In this example
number 4 is selected.
Summary of Contents for GWG
Page 1: ...GWG Gateway USER MANUAL GWG Document version 1 0 1 Date July 2016 WWW GENEKO RS ...
Page 43: ...43 User Manual GWG Gateway Figure 22 RIP configuration page ...
Page 136: ...136 User Manual GWG Gateway Click OK Figure 125 Policies from trust to untrust zone ...
Page 156: ...156 User Manual GWG Gateway Figure 150 Configuration page for SIM keepalive ...
