FTP is provided so guests can take advantage of the USB Drive attached to the Linksys e3000. Rule 3 gives the guest network access to essential services on the gateway. You can see this done better in Firewall Builder's templates. Rule 2 is sloppy but lets DHCP work on the internal network. Rule 1 enables loopback network communication on the router. Rule 0 adds all internal networks to the Anti-Spoofing Rule. The printing rule is restricted to the VPN Internet exit IP address. The current setup will be disabled anyway for printing seems to have been killed off by the dual monitor setup. This protected data in transit across the internet. I used an HTTPS URL with Windows XP to print remotely. In the past, I had Apache with SSL reverse proxying to CUPS. I say this is lazy due to having used a much better design in the past. Rule 2 is a lazy rule that enables me to print to my networked laser printer while I work from home logged into the work VPN.
The DMZ is off during the summer to keep the DMZ server from running up the electric bill. Rule 1 is disabled but allows access to the DMZ. Rule 0 allows all networks to NAT out to the Internet. So here are my firewall rules built with the help of Firewall Builder.
FIREWALL BUILDER TEMPLATES SOFTWARE
I got locked out of the desktop software once I setup security to my preferences. I mentioned on my blog that I have switched to DD-WRT on my Linksys e3000 router mainly because I was frustrated with Cisco's software requiring a Mac or PC in order to make some feature changes.
0 kommentar(er)
