54
Editing Advanced IP Filters
If you edit a filter after turning on firewall service, your changes affect connections already established with the server. For example, if any computers are connected to your Web server, and you change the filter to deny all access to the server, connected computers will be disconnected.
To edit advanced IP filters:
1In Server Admin, choose Firewall from the Computers & Services list.
2Click Settings.
3Select the Advanced tab.
4Select a filter and click Duplicate, Edit, or Delete. If you’re deleting a filter, you’ve finished.
5Make any changes to the settings, then click Save.
Changing the Default Filter
If the server receives a packet using a port or IP address to which none of your filters apply, firewall service uses the Default filter. You can set the Default filter to either deny or allow these packets for specific IP addresses. By default the Default filter denies access.
If you need to change the Default filter to allow access, you can. However, you shouldn’t take this action lightly. Changing the default to allow means you must explicitly deny access to your services by setting up specific port filters for all the services that need protection.
It is recommended that you leave the Default filter in place and use the General panel to create higher priority rules which allow access to designated services.
To change the Default setting:
1In Server Admin, choose Firewall from the Computers & Services list.
2Click Settings.
3Select the General tab.
4Select Default and click Edit.
5Make any changes to the settings, then Click Save.
Chapter 3 IP Firewall Service
