Motorola Netopia 3342N - Manual (Page 163)

163
Link: Packet Filter
When you click the Packet Filter link the Filter Sets screen appears.
Security should be a high priority for anyone administering a network connected to the Internet. Using
packet filters to control network communications can greatly improve your network’s security. The Packet
Filter engine allows creation of a maximum of eight Filter Sets. Each Filter Set can consist of many rules.
There can be a maximum of 32 filter rules in the system.
☛
WARNING:
Before attempting to configure filters and filter sets, please read and understand this entire
section thoroughly. Motorola Netopia® Gateways incorporating NAT have advanced security
features built in. Improperly adding filters and filter sets increases the possibility of loss of
communication with the Gateway and the Internet. Never attempt to configure filters unless you
are local to the Gateway.
Although using filter sets can enhance network security, there are disadvantages:
• Filters are complex. Combining them in filter sets introduces subtle interactions, increasing
the likelihood of implementation errors.
• Enabling a large number of filters can have a negative impact on per formance. Processing of
packets will take longer if they have to go through many checkpoints in addition to NAT.
• Too much reliance on packet filters can cause too little reliance on other security methods.
Filter sets are
not a substitute for password protection, effective safeguarding of passwords,
and general awareness of how your network may be vulnerable.
Netopia Embedded Software Version 7.7.4’s packet filters are designed to provide security for the Internet
connections made to and from your network. You can customize the Gateway’s filter sets for a variety of
packet filtering applications. Typically, you use filters to selectively admit or refuse TCP/IP connections from
cer tain remote networks and specific hosts. You will also use filters to screen par ticular types of connec-
tions. This is commonly called
firewalling your network.
Before creating filter sets, you should read the next few sections to learn more about how these power ful
security tools work.
What’s a filter and what’s a filter set?
A filter is a rule that lets you specify what sor t of data can flow in and out of your network. A par ticular filter
can be either an input filter—one that is used on data (packets) coming in to your network from the Inter-
net—or an output filter—one that is used on data (packets) going out from your network to the Internet.
A filter set is a group of filters that work together to check incoming or outgoing data. A filter set can consist
of a combination of input and output filters.