IP Plus Internet Services Swisscom (Switzerland) Ltd
 Services    Options    Our Network     Technical Info     Tools     Customer Care  
IP Plus Internet Services My.IP-Plus Swisscom (Switzerland) Ltd Sitemap Contact English German Français Italiano
Options for all services
Options for Business Internet, ISPs, Content Provider
Option for DSL
Address Translation & Filtering
Adress Translation and Filtering
 

General service description

The service option "Address Translation and Filtering" combines the possibilities of private network addressing and the usage of IP packet filters. This offers our customers a good basic security for their Internet access.

The advantage of the function "Address Translation" is that fewer publically routable IP addresses are required by offering customers the possibility to address their company network with private IP addresses.

With the function "Filtering" customers can additionally limit the access to open ports within their company network. On our web interface customers can find different filter levels with which they can define the flow of their data traffic from the Internet into their company network or vice versa.

 

Configuration

For the private addressing there are the following address ranges available (according to RFC 1918):

  • 10.0.0.0/8 to 10.255.255.255
  • 172.16.0.0/12 to 172.31.255.255
  • 192.168.0.0/16 to 192.168.255.255

For the port filtering there are different filter levels available. Using our web interface at http://my.ip-plus.net/nav.en.mpl/network customers can at any time independently adjust their basic configuration of the service option "Address Translation and Filtering" according to their personal needs. The access to the web interface is password and User ID protected.

Address Translation and Filtering

 

Security levels Internet -> LAN

Services Ports Security levels
0 1 2 3 4 5 6 7
Spoofing any
x
x
x
x
x
x
x
x
ICMP Ping/Traceroute Reply ok ok ok ok ok ok ok ok
ICMP Ping/Traceroute Request ok
x
x
x
x
x
x
x
ICMP All messages ok
x
x
x
x
x
x
x
Netbios 137-139/tcp, 137-139/udp ok ok
x
x
x
x
x
x
FTP 20/tcp, 21/tcp ok ok ok
!
x
!
x
x
SSH 22/tcp ok ok ok
x
x
x
x
x
Telnet 23/tcp ok
x
x
x
x
x
x
x
Mail 25/tcp (smtp), 110/tcp (pop3), 143/tcp (imap4), 993/tcp (imap4secure) ok ok ok ok ok
x
x
x
DNS 53/tcp, 53/udp ok ok ok ok
x
x
x
x
DNS IP-Plus 53/tcp, 53/udp - - - - - - - -
Web 80/tcp (http), 443/tcp (https/ssl) ok ok ok ok ok ok ok
x
News 119/tcp ok ok ok
x
x
x
x
x
UDP 0-52, 54-1023 ok ok ok
x
x
x
x
x
UDP 1024-65536 ok ok ok ok ok ok ok ok
TCP 0-19, 24, 26-52, 54-79, 81-109, 111-118, 120-136, 140-142, 144-442, 444-992, 994-1023 ok ok ok
x
x
x
x
x
TCP established 0-65536
x
x
x
ok ok ok ok ok
TCP high ports ok ok ok
x
x
x
x
x
x= Service is blocked, therefore not possible
ok= Service is allowed, therefore possible
!= Internet -> Lan (FTP Server in internal Lan): Only Active FTP connections are possible
= Lan -> Internet (FTP Client in internal Lan): Only Passive FTP connections are possible
 

Security levels LAN -> Internet

Services Ports Security levels
0 1 2 3
Spoofing any ok - - -
ICMP Ping/Traceroute Reply ok
x
x
x
ICMP Ping/Traceroute Request ok ok
x
x
ICMP All messages ok
x
x
x
Netbios 137-139/tcp, 137-139/udp ok
x
x
x
FTP 20/tcp, 21/tcp ok ok
x
x
SSH 22/tcp ok ok
x
x
Telnet 23/tcp ok ok
x
x
Mail 25/tcp (smtp), 110/tcp (pop3), 143/tcp (imap4), 993/tcp (imap4secure) ok ok ok
x
DNS 53/tcp, 53/udp ok
x
x
x
DNS IP-Plus 53/tcp, 53/udp ok ok ok ok
Web 80/tcp (http), 443/tcp (https/ssl) ok ok ok ok
News 119/tcp ok ok
x
x
UDP 0-52, 54-1023 ok
x
x
x
UDP 1024-65536 ok
x
x
x
TCP 0-19, 24, 26-52, 54-79, 81-109, 111-118, 120-136, 140-142, 144-442, 444-992, 994-1023 ok
x
x
x
TCP established 0-65536 ok
x
x
x
TCP high ports ok ok ok ok
x= Service is blocked, therefore not possible
ok= Service is allowed, therefore possible
 

Prices

The following prices apply for this service option:

One time installation costs none
Monthly recurring costs CHF 79.00

All prices without VAT or any other taxes.

 

Information

For further information on the service option "Address Translation and Filtering" please contact your local Swisscom sales representative or call 0800 800 900.