Differences

This shows you the differences between two versions of the page.

--- advanced-firewall [2022/01/21 02:45] – clarity, formatting hogwild
+++ advanced-firewall [2022/01/21 02:54] – clarity, grammar hogwild
@@ Line 3: / Line 3: @@
 The Firewall page allows you to configure options to protect/facilitate certain network communications.\\  \\
-{{:pasted:20220118-182859.png}}\\  \\
+{{:pasted:20220118-182859.png}}\\  \\ **WAN interfaces respond to ping and traceroute** - When enabled, this allows your device will reply to certain ICMP/UDP packets so that //ping //and //traceroute //from Internet hosts will work.
-**WAN interfaces respond to ping and traceroute** - When enabled, this allows your device will reply to certain ICMP/UDP packets so that //ping //and //traceroute //from Internet hosts will work.
 **Limit communication to **- Specifies the maximum number of requests per second to which the Firewall will reply. Setting a limit number is recommended to prevent DDoS attacks.\\
@@ Line 11: / Line 9: @@
  \\
-{{:pasted:20220118-183317.png}}\\  \\
+{{:pasted:20220118-183317.png}}\\
 **Enable TCP SYN cookies** - Enabling this protects the router from SYN Flood attacks via a well-known technique called "SYN cookies". This function encodes information from the SYN packet into the response (SYN/ACK). Despite being a standard technique, enabling this will create some secondary limitations that may not be handled well by some old TCP/IP stacks.
@@ Line 17: / Line 15: @@
 **Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP.
-**IPv6 IPSec Passthrough** - FIXME\\
+**IPv6 IPSec Passthrough** - FIXME\\ \\
+ \\
 {{:pasted:20220118-184523.png}}\\
@@ Line 33: / Line 33: @@
 Multicast\\ {{:pasted:20220118-185509.png}}\\  \\
-**Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) for your router.\\  **LAN0/LAN1/LAN2/LAN3** - where enabled the bridges will partecipate in IGMP subscription using the router as a proxy between the LANs selected. This essentially allows IGMP to work between VLANs.\\  **Enable quick leave** - This is a feature of IGMP v2 and allows the router to stop streaming of the multicast IP as soon as the end device sends the quick leave IGMP packet.\\  **Custom Configuration** - This option allows you to set up some advanced parameters for the IGMP proxy daemon. Make sure to consult the official documentation.\\
+**Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) service on the router.
- \\
+**LAN0/LAN1/LAN2/LAN3** - Specifies which bridges will be subscribed to partecipate in IGMP using the router as a proxy between the LANs selected. Essentially, this allows IGMP to work between VLANs.
+**Enable quick leave** - This is a feature of IGMP v2. This allows the router to stop the streaming of a multicast to an IP address as soon as that end device sends the quick leave IGMP packet.
+**Custom Configuration** - This option allows you to set up advanced parameters for the IGMP proxy daemon. Please consult the official IGMP documentation before finalizing these settings.\\
-{{:pasted:20220118-190050.png}}\\  \\
+ \\ {{:pasted:20220118-190050.png}}\\  \\
 **Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast communications between senders and receivers in different VLANs. Since their behavior is almost identical, it is recommended you use either Udpxy or IGMP proxy, but not both at the same time.

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools