Netgear ADSL Firewall Router DG834 Manuel d'utilisateur télécharger pdf (Page 162)

Reference Manual for the ADSL Firewall Router DG834

B-10 Network and Routing Basics

202-10005-05, June 2005

The DG834 ADSL router also functions as a DHCP client when connecting to the ISP. The router

can automatically obtain an IP address, subnet mask, DNS server addresses, and a gateway address

if the ISP provides this information by DHCP.

Internet Security and Firewalls

When your LAN connects to the Internet through a router, an opportunity is created for outsiders

to access or disrupt your network. A NAT router provides some protection because by the very

nature of the Network Address Translation (NAT) process, the network behind the NAT router is

shielded from access by outsiders on the Internet. However, there are methods by which a

determined hacker can possibly obtain information about your network or at the least can disrupt

your Internet access. A greater degree of protection is provided by a firewall router.

What is a Firewall?

A firewall is a device that protects one network from another, while allowing communication

between the two. A firewall incorporates the functions of the NAT router, while adding features for

dealing with a hacker intrusion or attack. Several known types of intrusion or attack can be

recognized when they occur. When an incident is detected, the firewall can log details of the

attempt, and can optionally send email to an administrator notifying them of the incident. Using

information from the log, the administrator can take action with the ISP of the hacker. In some

types of intrusions, the firewall can fend off the hacker by discarding all further packets from the

hacker’s IP address for a period of time.

Stateful Packet Inspection

Unlike simple Internet sharing routers, a firewall uses a process called stateful packet inspection to

ensure secure firewall filtering to protect your network from attacks and intrusions. Since

user-level applications such as FTP and Web browsers can create complex patterns of network

traffic, it is necessary for the firewall to analyze groups of network connection states. Using

Stateful Packet Inspection, an incoming packet is intercepted at the network layer and then

analyzed for state-related information associated with all network connections. A central cache

within the firewall keeps track of the state information associated with all network connections.

All traffic passing through the firewall is analyzed against the state of these connections in order to

determine whether or not it will be allowed to pass through or rejected.

1 2 ... 157 158 159 160 161 162 163 164 165 166 167 ... 235 236

Pas de commentaire

Netgear ADSL Firewall Router DG834 Manuel d'utilisateur Page 162