Chapter 11 Firewall

 

Table 70 SECURITY > FIREWALL > Rule Summary

 

LABEL

DESCRIPTION

 

#

This is your firewall rule number. The ordering of your rules is important as rules are

 

 

applied in turn. Click + to expand or - to collapse the Source Address, Destination

 

 

Address and Service Type drop down lists.

 

 

 

 

Name

This is the name of the firewall rule.

 

 

 

 

Active

This field displays whether a firewall is turned on (Y) or not (N). Click the setting to

 

 

change it.

 

 

 

 

Source Address

This drop-down list box displays the source addresses or ranges of addresses to

 

 

which this firewall rule applies. Please note that a blank source or destination

 

 

address is equivalent to Any.

 

 

 

 

Destination

This drop-down list box displays the destination addresses or ranges of addresses

 

Address

to which this firewall rule applies. Please note that a blank source or destination

 

 

address is equivalent to Any.

 

 

 

 

Service Type

This drop-down list box displays the services to which this firewall rule applies.

 

 

Custom services have an * before the name. See Appendix D on page 737 for a list

 

 

of common services.

 

 

 

 

Action

This field displays whether the firewall silently discards packets (Drop), discards

 

 

packets and sends a TCP reset packet or an ICMP destination-unreachable

 

 

message to the sender (Reject) or allows the passage of packets (Permit).

 

 

 

 

Sch.

This field tells you whether a schedule is specified (Yes) or not (No).

 

 

 

 

Log

This field shows you whether a log is created when packets match this rule (Yes) or

 

 

not (No).

 

 

 

 

Modify

Click the edit icon to go to the screen where you can edit the rule.

 

 

Click the delete icon to delete an existing firewall rule. A window displays asking you

 

 

to confirm that you want to delete the firewall rule. Note that subsequent firewall

 

 

rules move up by one when you take this action.

 

 

Click the insert icon to display the screen where you can configure a new firewall

 

 

rule. The insert icon at the top of the row creates the new firewall rule before the

 

 

others. The individual firewall rule insert icons create a new firewall rule after the

 

 

row’s firewall rule.

 

 

Click the move icon, type an index number, and press Enter to move the rule to the

 

 

number that you typed. The ordering of your rules is important as they are applied in

 

 

order of their numbering.

 

 

 

11.9.1 Firewall Edit Rule

In the Rule Summary screen, click the edit icon or the insert icon to display the Firewall Edit Rule screen.

Use this screen to create or edit a firewall rule. Refer to the following table for information on the labels.

See Section 11.1 on page 239 for more information about the firewall.

 

257

ZyWALL 2WG User’s Guide