Netgear DGB111G Operations Instructions download pdf (Page 178)

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

B-10 Network and Routing Basics

202-10006-05, June 2005

The DG834G wireless router also functions as a DHCP client when connecting to the ISP. The

router can automatically obtain an IP address, subnet mask, DNS server addresses, and a gateway

address if the ISP provides this information by DHCP.

Internet Security and Firewalls

When your LAN connects to the Internet through a router, an opportunity is created for outsiders

to access or disrupt your network. A NAT router provides some protection because by the very

nature of the Network Address Translation (NAT) process, the network behind the NAT router is

shielded from access by outsiders on the Internet. However, there are methods by which a

determined hacker can possibly obtain information about your network or at the least can disrupt

your Internet access. A greater degree of protection is provided by a firewall router.

What is a Firewall?

A firewall is a device that protects one network from another, while allowing communication

between the two. A firewall incorporates the functions of the NAT router, while adding features for

dealing with a hacker intrusion or attack. Several known types of intrusion or attack can be

recognized when they occur. When an incident is detected, the firewall can log details of the

attempt, and can optionally send email to an administrator notifying them of the incident. Using

information from the log, the administrator can take action with the ISP of the hacker. In some

types of intrusions, the firewall can fend off the hacker by discarding all further packets from the

hacker’s IP address for a period of time.

Stateful Packet Inspection

Unlike simple Internet sharing routers, a firewall uses a process called stateful packet inspection to

ensure secure firewall filtering to protect your network from attacks and intrusions. Since

user-level applications such as FTP and Web browsers can create complex patterns of network

traffic, it is necessary for the firewall to analyze groups of network connection states. Using

Stateful Packet Inspection, an incoming packet is intercepted at the network layer and then

analyzed for state-related information associated with all network connections. A central cache

within the firewall keeps track of the state information associated with all network connections.

All traffic passing through the firewall is analyzed against the state of these connections in order to

determine whether or not it will be allowed to pass through or rejected.

1 2 ... 173 174 175 176 177 178 179 180 181 182 183 ... 267 268

No comments

Netgear DGB111G Operations Instructions Page 178