Firewall; Settings; Ip-Address Filter; Mac Address Filter - Elcon ELCONNECT next BIG 10 Bedienungsanleitung

BIG 10 Router
3.4

Firewall

The BIG 10 provides extensive firewall protection for your network by restricting connection
parameters to limit the risk of intrusion and defending against a wide array of common hacker
attacks. To ensure remote access to one or several local PCs, despite of the aforesaid, this op-
tion has to be configured as specified in chapter NAT. Additional protection is provided by
special settings which prevent methods Hackers frequently use for starting an attack. Further,
you can set that client computer are fully or partially restricted from Internet access.

3.4.1 Settings

The firewall must be enabled before the BIG 10 can protect your network against hacker at-
tacks from the Internet. In addition, you may also enable specific safety mechanisms: deacti-
vating the options "Enable PING from WAN side" and "Enable PING from LAN side" pre-
vents the BIG 10 responding to Ping packets from the Internet and from the local network
respectively. "Drop Port Scan" blocks port scans from the Internet.

3.4.2 IP-Address Filter

The client computer Internet access can be restricted or fully refused, depending on its IP ad-
dress and according to the port number range chosen. If you wish to enter a certain IP address
or port number instead of a defined address range, one and the same number has to be entered
twice (e.g. 192.168.1.1 ~ 1). As port number you can enter a number between 1 and 65535.
Note Activating the option IP Address Filter is only possible if the firewall is enabled.

3.4.3 MAC Address Filter

You can block computers, which are linked via LAN, accessing the Internet based on their
MAC addresses. Therefore enable the function "MAC Address Filter" and enter the appropri-
ate MAC address of the data terminal.
Note Activating the option MAC Address Filter is only possible if the firewall is
enabled.

3.4.4 DDNS

DDNS (Dynamic Domain Name System) allows in case of dynamically assigned WAN IP
address that the BIG 10 is always found at the same host name. Different DynDNS providers
have been pre-configured. Please contact these providers to receive from them the needed
settings.
Version: 2011/01/19
49