This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
advanced-firewall [2022/01/21 02:48] – grammar, formatting hogwild | advanced-firewall [2023/05/28 04:13] – [NAT] -resize "advanced-firewall-NAT.jpg" to 454x113 hogwild | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ===== Firewall ===== | + | ====== Firewall |
- | The Firewall page allows you to configure options to protect/facilitate | + | The Firewall page allows you to configure options to protect |
- | {{: | ||
- | **WAN interfaces respond to ping and traceroute** - When enabled, this allows your device will reply to certain ICMP/UDP packets so that //ping //and // | + | ===== Firewall ===== |
- | **Limit communication | + | {{: |
- | \\ | + | **Limit communication to: **This specifies the maximum number of requests per second to which the Firewall will reply. Setting a limit number is recommended to prevent DDoS attacks.\\ |
- | {{: | + | \\ \\ **Enable TCP SYN cookies: |
- | **Enable | + | **Enable |
- | **Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP. | + | **Allow DHCP Spoofing: |
- | **IPv6 IPSec Passthrough** - FIXME\\ | + | **Smart MTU black hole detection:** |
- | {{: | ||
- | **NAT loopback** | + | ===== NAT ===== |
+ | |||
+ | **NAT loopback:** This technique allows LAN devices to access | ||
* All | * All | ||
Line 27: | Line 27: | ||
* Disabled | * Disabled | ||
- | **NAT target** - Defines | + | \\ |
+ | |||
+ | {{:: | ||
+ | |||
+ | **NAT target** - This defines | ||
\\ | \\ | ||
- | Multicast\\ {{: | ||
- | **Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) for your router.\\ | + | ===== Multicast ===== |
- | {{: | + | \\ \\ {{: |
+ | |||
+ | **Enable IGMP proxy** - Checking this enables the IGMP (Internet Group Management Protocol) service. | ||
+ | |||
+ | LAN0 - LAN3 Specifies which bridges will be participate in IGMP using the router as a proxy between the LANs selected. This allows IGMP to work between VLANs. | ||
+ | |||
+ | * LAN0 - Checking this specifies the LAN0 bridge will participate in IGMP. | ||
+ | * LAN1 - Checking this specifies the LAN1 bridge will participate in IGMP. | ||
+ | * LAN2 - Checking this specifies the LAN2 bridge will participate in IGMP | ||
+ | * LAN3 - Checking this specifies the LAN3 bridge will participate in IGMP | ||
+ | |||
+ | \\ | ||
+ | |||
+ | **Enable quick leave** - This is a feature of IGMP v2. This allows the router to stop the streaming of a multicast to an IP address as soon as that end device sends the quick leave IGMP packet. | ||
+ | |||
+ | **Custom Configuration** - This option allows you to set up advanced parameters for the IGMP proxy daemon. Please consult the official IGMP documentation before finalizing these settings.\\ | ||
+ | |||
+ | | ||
**Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast communications between senders and receivers in different VLANs. Since their behavior is almost identical, it is recommended you use either Udpxy or IGMP proxy, but not both at the same time. | **Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast communications between senders and receivers in different VLANs. Since their behavior is almost identical, it is recommended you use either Udpxy or IGMP proxy, but not both at the same time. | ||
Line 47: | Line 67: | ||
**Max clients -** Considering this is a lightwave protocol it works well for a limited number of clients, you might want to impose a maximum number.Specifies the maximum number of simultaneous Udpxy clients. | **Max clients -** Considering this is a lightwave protocol it works well for a limited number of clients, you might want to impose a maximum number.Specifies the maximum number of simultaneous Udpxy clients. | ||
- | **Udpxy port**- | + | **Udpxy port**- |
- | + | ||
- | {{: | + | |
- | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping is a way to have the switch (router) | + | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping is a way to have the switch (part of the router) |
- | **Force IGMPv2** - IGMPv2 enhances IGMP communication, supporting additional messages/ | + | **Force IGMPv2** - IGMPv2 enhances |