50
•DNS/Rendezvous
•ICMP Echo Reply (incoming pings)
•IGMP (Internet Gateway Multicast Protocol)
•PPTP VPN
•L2TP VPN
•QTSS media streaming
•iTunes Music Sharing
Important: If you add or change a filter after starting firewall service, the new filter will affect connections already established with the server. For example, if you deny all access to your FTP server after starting firewall service, computers already connected to your FTP server will be disconnected.
To open the firewall for standard services:
1In Server Admin, choose Firewall from the Computers & Services list.
2Click Settings.
3Select the General tab.
4Select the Any address group.
If you want to restrict or designate IP addresses for a standard service, you should create an address group rather than use the Any address group. See “Creating an Address Group” on page 50 for more information.
5Select the services you want to allow.
6Click Save.
Creating an Address Group
You can define groups of IP addresses for your firewall filters. These groups are used to organize and target the filters. The default address group is for all addresses.
Addresses can be listed as individual addresses (192.168.2.2) or IP address and CIDR format netmask (192.168.2.0/24).
To create an address group:
1In Server Admin, choose Firewall from the Computers & Services list.
2Click Settings.
3Select the General tab.
4Click Add beneath the Address Group pane.
5Enter a group name.
6Enter the addresses and subnet mask you want the filters to effect.
7Click OK.
Chapter 3 IP Firewall Service
