Chapter 5

Expert Configuration

Creating a firewall rule Proceed as follows to create a new security level and to add rules:

1Select one of the six security levels.

2Click Customize.

3Type name and description for the new security level and click Apply.

4Click New to add a rule.

5Fill in all the fields.

Index:

The index of the firewall rule. The firewall hierarchically goes through the rules, starting from rule 1. When no rule is hit, the firewall will block the traffic because of his default behaviour.

Name:

The name of the rule.

Source Interface:

The source interface. (e.g. _lan1, _wan1, _dmz1,...)

Source IP - Select:

The name of the source IP expression.

You can also type an IP address.

Destination Interface:

The destination interface (e.g. _lan1, _wan1, _dmz1,...)

Destination IP- Select:

The name of the destination IP expression.

You can also type an IP address.

Service:

The service or protocol. (e.g. smtp, http, telnet,...)

Flags:

Enable:

To enable the rule or not.

Log:

To log the actions concerning this rule. You can see the result in

Firewall > Log.

Action:

Accept:

The connection is accepted.

Deny:

Send to the sender that the packet could not be delivered.

Drop:

The packet is silently discarded.

Reset:

Reset of the connection.

Count:

Counts the number of connections that match the rule description. Contrary to other actions this action does not stop further parsing of the firewall rules database.

The results are shown in the Hits column.

6Click Apply.

E-DOC-CTC-20051017-0151 v1.0

173

 

Page 183
Image 183
RCA 605 Click Customize, Destination Interface, Destination IP- Select, Flags Enable, Firewall Log Action Accept, Deny