IDS and advanced options configuring?

Ok I wanted to know what all these options stand for.

1. Allow UPNP in the Trusted zone.

2. Allow incoming streams from the internet via the IGMP protocol.

3. Maintain inactive TCP connections.

4. Allow communication fro Bridges connections.

The rest is all one by default but I have no clue what the ones on top mean. Can someone explain.

Thank you very much EEZDVA.

 

1
http://en.wikipedia.org/wiki/Universal_Plug_and_Play
2
http://en.wikipedia.org/wiki/Internet_Group_Management_Protocol
3
as a guess could help with maintaining connections to the sites which otherwise might be terminated by the fw
4
http://www.windowsnetworking.com/articles_tutorials/wxpbrdge.html

all in all useful to have enabled

 

Ok I know what nr 1 is. But i just wondered if it was safe to enable it.


Or actually I wonder about all...

 

if you are using upnp then enable it otherwise the fw might block it, same for some streaming apps in 2, for 3 if all is working fine leave be and 4 ditto

 

Ok yeah everything is working fine.

I wondered though cause my friend has a network printer but she has no clue how to use a computer. I wanted to recommend ESS but she'll freak out everytime she'd get a message from the firewall to allow or deny things.

Anyways with the UPNP enabled. Will it not ask a question for the printer to work . Like would the printer be allowed automaticly witht the firewall set on automatic?

 

yes, if you set her install on automatic she will have minimum hassle

 

She should first try out ESS to see if it works properly in her configuration. For instance, some network printers or other network devices may cause port scan attacks which would temporarily block all further communication by default. I assume that people with little computer knowledge wouldn't be able to remedy it. Based on the testing she would then decide whether to purchase ESS or EAV.

 

Aha. so with the UPNP enabled it will be normally working? Sorry just double checking.

 

I would say it would work in majority of cases without it enabled but as Marcos pointed out she can always trial it first