Firewall Rules - NETGEAR DGN3500 User Manual

.
To enable keyword blocking, select one of the following:
3
Per Schedule. Turn on keyword blocking according to the settings in the Schedule
•
screen.
Always. Turn on keyword blocking all the time, independent of the Schedule screen.
•
Enter a keyword or domain in the Keyword field, click Add Keyword, and then click Apply.
4
Some examples of keyword application follow:
If the keyword XXX is specified, the URL http://www.badstuff.com/xxx.html is blocked.
•
If the keyword .com is specified, only websites with other domain suffixes (such as
•
.edu or .gov) can be viewed.
Enter a period (.) as to block all Internet browsing access.
•
Up to 32 entries are supported in the Keyword list.
To delete a keyword or domain, select it from the list, click Delete Keyword, and then click
5
Apply.
To specify a trusted user, enter that computer's IP address in the Trusted IP Address field,
6
and click Apply.
You can specify one trusted user, which is a computer that will be exempt from blocking
and logging. Since the trusted user will be identified by an IP address, you should
configure that computer with a fixed IP address.
Click Apply to save your settings.
7

Firewall Rules

Firewall rules block or allow specific traffic passing through from one side of the router to the
other. Inbound rules (WAN to LAN) restrict access by outsiders to private resources,
selectively allowing only specific outside users to access specific resources. Outbound rules
(LAN to WAN) determine what outside resources local users can have access to.
A firewall has two default rules, one for inbound traffic and one for outbound. The default
rules of the wireless modem router are:
Inbound. Block all access from outside except responses to requests from the LAN
•
side.
Outbound. Allow all access from the LAN side to the outside.
•
You can define additional rules that will specify exceptions to the default rules. By adding
custom rules, you can block or allow access based on the service or application, source or
destination IP addresses, and time of day. You can also choose to log traffic that matches or
does not match the rule you have defined.
You can change the order of precedence of rules so that the rule that applies most often
takes effect first. See
N300 Wireless Gigabit ADSL2+ Modem Router DGN3500
Order of Precedence for Rules
Protecting Your Network
on page 41 for more details.
36