User`s guide

Chapter 15 The Firewall Screens
User’s Guide
160
The WiMAX Modem has one Ethernet (LAN) port. The LAN (Local Area Network) port
attaches to a network of computers, which needs security from the outside world. These
computers will have access to Internet services such as e-mail, FTP and the World Wide Web.
However, “inbound access” is not allowed (by default) unless the remote host is authorized to
use a specific service.
15.2 Firewall Setting
This section describes firewalls and the built-in WiMAX Modem’s firewall features.
15.2.1 Firewall Rule Directions
Figure 85 Firewall Rule Directions
LAN-to-WAN rules are local network to Internet firewall rules. The default is to forward all
traffic from your local network to the Internet.
You can block certain LAN-to-WAN traffic in the Services screen (click the Services tab). All
services displayed in the Blocked Services list box are LAN-to-WAN firewall rules that block
those services originating from the LAN.
Blocked LAN-to-WAN packets are considered alerts. Alerts are “higher priority logs” that
include system errors, attacks and attempted access to blocked web sites. Alerts appear in red
in the View Log screen. You may choose to have alerts e-mailed immediately in the Log
Settings screen.
LAN-to-LAN/WiMAX Modem means the LAN to the WiMAX Modem LAN interface. This
is always allowed, as this is how you manage the WiMAX Modem from your local computer.
WAN-to-LAN rules are Internet to your local network firewall rules. The default is to block
all traffic from the Internet to your local network.
How can you forward certain WAN to LAN traffic? You may allow traffic originating from the
WAN to be forwarded to the LAN by:
• Configuring NAT port forwarding rules.