ZyWALL 2 and ZyWALL 2WE

 

 

Table 16-1 Firewall Rules Summary: First Screen

 

 

 

 

 

FIELD

DESCRIPTION

 

 

 

 

 

 

Log

This field shows you if a log is created for packets that match the rule (Match), don't

 

 

 

match the rule (Not Match), both (Both) or no log is created (None).

 

 

Alert

This field tells you whether this rule generates an alert (Yes) or not (No) when the

 

 

 

rule is matched.

 

 

Insert

Type the index number for where you want to put a rule. For example, if you type “6”,

 

 

 

your new rule becomes number 6 and the previous rule 6 (if there is one) becomes

 

 

 

rule 7.

 

 

 

Click Insert to display this screen and refer to the following table for information on

 

 

 

the fields.

 

 

 

 

 

 

Move

Select a rule’s Index option button and type a number for where you want to put that

 

 

 

rule. Click Move to move the rule to the number that you typed. The ordering of your

 

 

 

rules is important as they are applied in order of their numbering.

 

 

 

 

 

 

Rule to (Rule

Click a rule's option button and type the number for where you want to put that rule.

 

 

Number)

 

 

 

 

 

 

 

Click Apply to save your changes to the ZyWALL. Click Edit to create or edit a rule. Click Delete to

 

 

delete an existing firewall rule. Note that subsequent firewall rules move up by one when you take this

 

 

action. Click Help for online HTML help on fields in this screen

 

16.5 Predefined Services

The Available Services list box in the Rule Config(uration) screen (see Figure 16-4) displays all predefined services that the ZyWALL already supports. Next to the name of the service, two fields appear in brackets. The first field indicates the IP protocol type (TCP, UDP, or ICMP). The second field indicates the IP port number that defines the service. (Note that there may be more than one IP protocol type. For example, look at the default configuration labeled “(DNS)”. (UDP/TCP:53) means UDP port 53 and TCP port 53. Up to 128 entries are supported. Custom services may also be configured using the Custom Ports function discussed later.

 

Table 16-2 Predefined Services

 

 

SERVICE

DESCRIPTION

 

 

AIM/New-ICQ(TCP:5190)

AOL’s Internet Messenger service, used as a listening port by ICQ.

 

 

AUTH(TCP:113)

Authentication protocol used by some servers.

 

 

BGP(TCP:179)

Border Gateway Protocol.

 

 

Creating Custom Rules

16-7