Setting up Your Hardware Firewall - Protecting Ports
(Page 4 of 5 )
For additional security, you can also use rules to specifically block particular ports against services. The Firewall Rules page shows two sets of rules, those for incoming and those for outgoing. All incoming services are denied access by the default BLOCK rule, and all outgoing services are given access using the default ALLOW rule. Some additional information is also displayed. This kind of information will usually be shown in a similar format no matter which router you have:
To add a new rule, all you need to do is click on the Add button, which will take you to a page that allows you to choose the type of service that you would like to set a rule for, the action the router should take when the service is requested, who it should be blocked from and whether you would like each block action logged. Devices made by other manufacturers may have additional options that you are able to configure:
To add a new rule, first choose which service the rule should act upon; the FINGER command allows other people to obtain information about your computer or connection and some worms have also made use of this service. You wouldn’t normally worry about blocking outgoing FINGER services, as to give any information away, your computer would need to receive an incoming FINGER, but it is a basic enough rule to illustrate this example well and shouldn’t prevent you from using your computer in the way you would normally (unless you usually send FINGER requests of course.)
To block it, simply choose FINGER(TCP):79 from the services listbox, set the action to BLOCK always and ensure the LAN / WAN users options are set to Any. Whether you decide to log the attempts or not is entirely up to you; the default action is to always log, and it won’t do any harm to leave it at this. Once these options have been set, just click the apply button. Your new rule should be displayed:
When setting new rules, you are able to specify either allow or block always or at certain times. For example, if you wanted to stop your kids from accessing the internet while you were at work, you could just set a rule that blocked all outgoing HTTP requests on port 80 (and all HTTPS requests on port 443 just to be sure) by schedule. You would then need to set the schedule to enforce the rule.
Next: Custom Services >>
More Hardware Guides Articles
More By Dan Wellman
| Recommended by Dev Hardware |
|---|
|
/ 18 
