SPI Firewall
------------
Quick Reference
---------------
Firewall by default will protect router from most common DOS attack like, port scanning, SYN flooding, ICMP flooding, SMURF and SPOOFING attacks.
No additional rule is necessary.
Rules
=====
o- The firewall manage only packets coming in through the WAN port.
o- There are 3 levels of selectable default rules, Low, Medium and High.
o- Max. of 30 rules including default rules are supported.
o- The rule priority is highest at the top of the table and lowest at the bottom.
o- Each rule can be enable or disabled by adding or removing the check box on the left side of the rule.
o- Default rules will automatically be added when one of the level low, medium or
high is clicked.
o- All default rules can be modified or deleted.
o- Ports added in Port Forwarding table must also have firewall rule open for these ports.
o- As firewall check only packets coming into WAN port, thus all parameters in rule are
reference to this packet.
Source IP will be the public IP of the sending device.
Destination IP will be the public IP of the user's device( *see Note 1) at or behind
the router.
Similarly, Source Port will be the sending device Port number and Destination Port will
be the port number of the user's device (*see Note 1) at or behind the router.
o- If you obtain IP address dynamically from ISP for you WAN connection, the Destination
IP field in rule should be set to "any'.
* Note 1
========
Depending on your ISP services, the following are supported by NetPassage.
1) NAT enable, WAN learn IP dynamically from ISP.
---------------------------------------------
In this case the Destination IP will always be the public IP the router's WAN port.
As this WAN IP changes each time router make a connection, it is recommended to set
the Destination IP field to "any" in the rule.
2) NAT enabled. ISP assigned only one fixed public IP for WAN connection.
----------------------------------------------------------------------
In this case, you can enter this public IP in the Destination IP field for better
security.
3) NAT enabled. ISP assigned 1 fixed public IP for WAN connection plus an IP block.
--------------------------------------------------------------------------------
In this case, Destination IP can be the WAN assigned public IP or any of the IP
from the ISP assigned block.
4) NAT disabled. ISP assigned a block of public IP.
------------------------------------------------
In this case, Destination IP will be the public IP assigned to that user's device.
Firewall Log
------------
o- To capture a packet accepted or denied into router check the protocol under Deny,
Accept and ICMP and click Apply. There is not need to reboot router to activate it.
e.g. to capture any TCP packet deny into router, check TCP under Deny section and
click the Apply button.
o- Log page can display up 50 logs per page. New logs are appended to the bottom and
old one scroll off at the top. Router does not currently to capture log to file.
o- Example of types of display at information colunm:
a) connection not in hash queue-- report packet source port match a rule but
destination port not in hash queue and was denied.
Hash queue is a queue created by router when a
local PC makes a connection behind router to WAN.
b) packet matches no rule-- report packet source and destination port dose not match
any rule.
Download Driver Pack
After your driver has been downloaded, follow these simple steps to install it.
Expand the archive file (if the download file is in zip or rar format).
If the expanded file has an .exe extension, double click it and follow the installation instructions.
Otherwise, open Device Manager by right-clicking the Start menu and selecting Device Manager.
Find the device and model you want to update in the device list.
Double-click on it to open the Properties dialog box.
From the Properties dialog box, select the Driver tab.
Click the Update Driver button, then follow the instructions.
Very important: You must reboot your system to ensure that any driver updates have taken effect.
For more help, visit our Driver Support section for step-by-step videos on how to install drivers for every file type.