Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual download pdf (Page 102)

100

101

Chapter 7 Traﬃc Policy

102

Figure 7.39 Deﬁnition of a Full cone NAT traﬃc rule

• Source — IP address of an SIP telephone in the local network.

• Destination — name or IP address of an SIP server in the Internet. Full cone NAT will

apply only to connection with this server.

• Service — SIP service (for an SIP telephone). Full cone NAT will not apply to any other

services.

• Action — traﬃc must be allowed.

• Translation — select a source NAT method (see chapter 7.3) and enable the Allow

returning packets from any host (Full cone NAT) option.

Figure 7.40 Enabling Full cone NAT in the traﬃc rule

Rule for Full cone NAT must precede the general rule with NAT allowing traﬃc from the local

network to the Internet.

7.9 Media hairpinning

WinRoute allows to “arrange” traﬃc between two clients in the LAN which “know each other”

only from behind the ﬁrewall’s public IP address. This feature of the ﬁrewall is called hairpin-

ning (with the hairpin root suggesting the packet’s “U-turn” back to the local network). Used

especially for transmission of voice or visual data, it is also known as media hairpinning.

1 2 ... 97 98 99 100 101 102 103 104 105 106 107 ... 367 368

Comments to this Manuals

No comments

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual Page 102

Comments to this Manuals