Using Rules To Block Or Allow Specific Kinds Of Traffic; About Service Based Rules - NETGEAR DGFV338 ProSafe Reference Manual

DGFV338 ProSafe Wireless ADSL Modem VPN Firewall Router Reference Manual
The ProSafe DGFV338 also provides Web Content filtering—by Domain name (Web sites) and by
Keyword Blocking. Browsing activity reporting and instant alerts via e-mail provide reports on
Content Filtering activities. You can establish restricted access policies based on time-of-day,
specific Web Components, Web sites and Web address keywords. You can also block Internet
access by applications and services, such as chat or games.

Using Rules to Block or Allow Specific Kinds of Traffic

This section includes the following topics:
• "About Service Based Rules" on page 4-2
• "Outbound Rules (Service Blocking)" on page 4-4
• "Inbound Rules (Port Forwarding)" on page 4-7
• "Considerations for Inbound Rules" on page 4-15
• "Order of Precedence for Rules" on page 4-16
• "Customized Services" on page 4-16
• "Setting Quality of Service (QoS) Priorities" on page 4-18
• "Attack Checks" on page 4-19
Firewall rules are used to block or allow specific traffic passing through from one side to the other.
Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively allowing
only specific outside users to access specific resources. Outbound rules (LAN to WAN) determine
what outside resources local users can have access to.

About Service Based Rules

The rules to block traffic are based on the traffic's category of service.
• Inbound rules (port forwarding). Inbound traffic is normally blocked by the firewall unless
the traffic is in response to a request from the LAN side. The firewall can be configured to
allow this otherwise blocked traffic.
• Outbound rules (service blocking). Outbound traffic is normally allowed unless the firewall
is configured to disallow it.
• Customized services. Additional services can be added to the list of services in the factory
default list. These added services can then have rules defined for them to either allow or block
that traffic.
4-2
v1.0, May 2008
Security and Firewall Protection