This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
advanced-firewall [2022/01/21 02:49] – hogwild | advanced-firewall [2022/01/21 02:54] – clarity, grammar hogwild | ||
---|---|---|---|
Line 3: | Line 3: | ||
The Firewall page allows you to configure options to protect/ | The Firewall page allows you to configure options to protect/ | ||
- | {{: | + | {{: |
- | **WAN interfaces respond | + | **Limit communication |
- | **Limit communication to **- Specifies the maximum number of requests per second to which the Firewall will reply. Setting a limit number is recommended to prevent DDoS attacks. | ||
\\ | \\ | ||
- | \\ | ||
- | {{: | + | {{: |
- | \\ | + | |
- | | + | |
**Enable TCP SYN cookies** - Enabling this protects the router from SYN Flood attacks via a well-known technique called "SYN cookies" | **Enable TCP SYN cookies** - Enabling this protects the router from SYN Flood attacks via a well-known technique called "SYN cookies" | ||
Line 19: | Line 15: | ||
**Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP. | **Enable DCSP Fix** - This enables a workaround for a well-known issue related to DSCP (packet marking) when connected to the Comcast ISP. | ||
- | **IPv6 IPSec Passthrough** - FIXME\\ | + | **IPv6 IPSec Passthrough** - FIXME\\ \\ |
- | {{: | + | \\ |
+ | |||
+ | {{: | ||
**NAT loopback** - also known as " | **NAT loopback** - also known as " | ||
Line 35: | Line 33: | ||
Multicast\\ {{: | Multicast\\ {{: | ||
- | **Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) | + | **Enable IGMP proxy** - Runs the IGMP (Internet Group Management Protocol) |
+ | |||
+ | **LAN0/ | ||
+ | |||
+ | **Enable quick leave** - This is a feature of IGMP v2. This allows the router to stop the streaming of a multicast | ||
+ | |||
+ | **Custom Configuration** - This option allows you to set up advanced parameters for the IGMP proxy daemon. | ||
- | {{: | + | |
**Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast communications between senders and receivers in different VLANs. Since their behavior is almost identical, it is recommended you use either Udpxy or IGMP proxy, but not both at the same time. | **Enable Udpxy** - Like IGMP proxy, Udpxy allows multicast communications between senders and receivers in different VLANs. Since their behavior is almost identical, it is recommended you use either Udpxy or IGMP proxy, but not both at the same time. | ||
Line 49: | Line 53: | ||
**Max clients -** Considering this is a lightwave protocol it works well for a limited number of clients, you might want to impose a maximum number.Specifies the maximum number of simultaneous Udpxy clients. | **Max clients -** Considering this is a lightwave protocol it works well for a limited number of clients, you might want to impose a maximum number.Specifies the maximum number of simultaneous Udpxy clients. | ||
- | **Udpxy port**- | + | **Udpxy port**- |
{{: | {{: | ||
- | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping is a way to have the switch (router) | + | **Efficient Multicast Forwarding (IGMP Snooping) -** IGMP snooping is a way to have the switch (router) |
- | **Force IGMPv2** - IGMPv2 enhances IGMP communication, supporting additional messages/ | + | **Force IGMPv2** - IGMPv2 enhances |