ZyWALL 10/50 Internet Security Gateway

i.A mail server with an IP of 192.168.10.2.

ii.Two FTP servers. You want FTP server 1 (IP of 192.168.10.3) to be accessible from the Internet, but FTP server 2 (192.168.10.4) may only be accessed by internal users, i.e., from the local network.

iii.HTTP proxy server at 192.168.10.5.

You want:

i.To send alerts when there is an attack.

ii.To only allow access to the Internet from the HTTP proxy server and your mail server.

iii.To only allow FTP server 1 to be accessible from the Internet.

Step 1. First you want to send alerts when there is an attack. Go to the Attack Alert screen (click Configuration, then the Attack Alert tab) shown next.

Click this box to send alerts when there is an attack.

Figure 16-6 Send Alerts When Attacked

Step 2. Configure the E-mailscreen as shown in example 1: your mail server’s IP is 192.168.10.2.

Example Firewall Rules

16-7