Tp-link Router Firewall Function application example

Enterprise users use routers to share the Internet, often need to restrict access to the intranet computer, such as restricting some computers can not access the Internet, restricting certain computers to send and receive mail, but can not browse the Web page, limit the computer can not access a site, and some computers have advanced permissions, without any restrictions. The router has the firewall function, the function can combine flexibly into a series of control rules, form the complete control strategy, the effective management staff surfer, can facilitate you to the local area network computer to carry on the further management. The packet filtering function can control the access of computers to some Web sites on the Internet; "MAC address Filtering" is to control the access of computers to the Internet through MAC address filtering. Domain name filtering can restrict access to certain Web sites by computers in the local area network.

The following is an example of a tl-r490 router that describes the method of setting. There are 8 computers in the local area network, Computer 1 (ip:192.168.1.2) cannot surf the Internet, Computer 2 (ip:192.168.1.3) can send and receive mail but can not browse the webpage, the computer 3 (ip:192.168.1.4) cannot access this site (219.134.132.61), Computer 4 (ip:192.168.1.5) can not send and receive mail but can browse Web pages, other computers are not subject to any restrictions. The following is the ability to access the Internet through packet filtering, since the default filtering rule is set to allow approval if no restrictions are imposed on other computers, and if no other computer is allowed to surf the Internet, the default filtering rule should be set to No pass ( Of course, your IP filter entry should be allowed to operate the method:

The first entry above is designed to allow computers to interpret the IP address of a domain name through a DNS server so that the computer can connect normally, but this example does not add, as the default rule is allowed to pass. In the case where the default filtering rule is prohibited, this entry is bound to be added up.

In addition to the "Packet filtering" settings described above, it is possible to restrict the access of some computers to the Internet through MAC address filtering.

Port service Corresponding table: ftp--21, HTTP (Browse Web page)---80,smtp (send mail)---25,pop (receive mail)----110,dns (domain Name Service)--------53.