This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | Next revisionBoth sides next revision | ||
advanced-firewall [2022/01/21 02:31] – formatting hogwild | advanced-firewall [2022/01/21 02:45] – clarity, formatting hogwild | ||
---|---|---|---|
Line 13: | Line 13: | ||
{{: | {{: | ||
- | **Enable TCP SYN cookies** - Enabling this protects the router from SYN Flood attacks via a well-known technique called "SYN cookies" | + | **Enable TCP SYN cookies** - Enabling this protects the router from SYN Flood attacks via a well-known technique called "SYN cookies" |
**Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP. | **Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP. | ||
Line 21: | Line 21: | ||
{{: | {{: | ||
- | **NAT loopback** - also known as " | + | **NAT loopback** - also known as " |
* All | * All | ||
Line 27: | Line 27: | ||
* Disabled | * Disabled | ||
- | **NAT target** - Defines the way NAT is implemented for the sake of Hairpinning. Masquerade is the default however this involves an additional lookup ad the mapping of done towards an interface. SNAT is faster | + | **NAT target** - Defines the way NAT is implemented for the sake of Hairpinning. Masquerade is the default, however this involves an additional lookup ad the mapping of done towards an interface. SNAT is minimally minutely |
\\ | \\ | ||
- | Multicast\\ | + | Multicast\\ {{: |
**Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) for your router.\\ | **Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) for your router.\\ | ||
Line 39: | Line 39: | ||
{{: | {{: | ||
- | **Enable Udpxy** - Similarly to IGMP proxy Udpxy allows multicast | + | **Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast |
- | **Upstream interface** | + | **Upstream interface** - Defines where the stream source is expected to live. (Default: blank). |
- | **LAN0/ | + | **LAN0/ |
- | **Enable client statistics** - As the option suggest if enabled | + | **Enable client statistics** - Enabling this causes FreshTomato to collect |
- | **Max clients** | + | **Max clients |
**Udpxy port**- This is where you can consult the Udpxy information on your router.\\ | **Udpxy port**- This is where you can consult the Udpxy information on your router.\\ |