Administrator's Guide - Kerio Software Archive

Firewall and Intrusion Prevention System
MAC address list
This list includes MAC addresses of computers with either filtered (blocked) or allowed
traffic — depending on the mode.
MAC addresses are defined as six bytes (hexadecimal numbers) separated by colons
(e.g.: a0:de:bf:33:ce:12) or dashes (e.g.: a0-de-bf-33-ce-12) or in a compact format
without separators (a0debf33ce12).
For better reference, each MAC address can be optionally accompanied by a description
of the particular device. It is highly recommended to use these descriptions thoroughly
— the MAC address itself provides no helpful reference information.
Warning:
It is necessary to bear in mind that a wrong setting of the MAC address filter may also
block access to the firewall’s remote administration. If this happens, it is necessary to
connect to the firewall from a computer from which traffic is allowed or locally (the Windows
edition). The Software Appliance / VMware Virtual Appliance edition does not allow local
administration. If the remote administration gets completely blocked, the only option is
recovery of default configuration (see chapter 2.11). However, after the recovery, it is
necessary to reconfigure the firewall.
For these reasons it is recommended to change MAC filter settings only with utmost caution
so that you do not block remote administration.
8.3 Special Security Settings
Kerio Control provides several additional options for traffic filtering that cannot be defined by
traffic rules. These options can be set in the Miscellaneous tab of the Configuration → Traffic
Policy → Security Settings section.
Figure 8.4
Security options — Anti-Spoofing and cutting down number of connections for one host
118