Changing TCP/IP settings in routers/firewall

Archived from groups: comp.security.firewalls (More info?)

Hi all !

Does anyone know how to change the TCP/IP settings in a router/firewall ?.
Or is it neccesary ?

I ask because I dont know if my router/firewall (TrendNet TW100-BRF104) is
running at optimal speed !.

Thanks in advance !

My regards
Søren

Archived from groups: comp.security.firewalls (More info?)

"Søren Skovgaard" <ssk@spam_privat.dk> wrote in
news:40881c7a$0$162$edfadb0f@dtext02.news.tele.dk:

> Hi Duane !
>
> Thanks for the answer - I looked at your link, and my firewall
> actually can do what the text says. I can open ports etc like normal
> routers, but it only works with the TCP/IP protocol (no IPX etc). And
> it blocks all attempts to hack my network from outside and inside -
> then I get an E-mail. Nevertheless there is no documentation about
> changing the MTU for the WAN port - but it has the possibillity to
> make a telnet-connection to the firewall. Here it has a lot of
> commands (but no documentation on those). My question is - does all
> routers/firewalls have an autosense on the WAN port regrading the MTU
> etc, or ?
>

The Max Transmission Size has to deal with the max size an IP packet can
be. If the packet size is > MTU setting, then the packets are fragmented.
The only time I have seen MTU used on a router is for one that was
connecting to a PPPoE or PPPoA ISP that require that the MTU must be set to
a specified number for the connection.

If you're not connecting to an ISP like one of the above, then I would say
that the MTU is not being used on the router.

You have a nice router and I did read the specs on it. It's a standard NAT
router for home usage that has SPI and does not meet the specs for an
appliance that has a true FW. It would be able to stop inbound or outbound
by specified IP, all Port(s) TCP/UDP, all protocols (HTTP, HTTPS, Telnet,
FTP, etc. etc.).

Manufactures of the NAT routers use the word Firewall calling NAT, SPI and
a little DoS ability a FW. It doesn't have a FW.

I use a cheap Linksys myself.

Duane