P312 Broadband Security Gateway

Table 16-2 Firewall Rules Summary – First Screen

Field

Description

General

Option

Name

This is the name of the firewall rule set.

 

Default Permit Log

Check this box to log all matched rules in the ACL

 

 

default set.

 

The default action for packets

Should packets that do not match the following rules

Block

not matching following rules.

be blocked or forwarded? Make your choice from

Forward

 

the drop down list box. Note that “block” means the

 

 

 

firewall silently discards the packet.

 

 

 

 

Firewall Rule Summary

The following fields summarize the rules you have

 

 

created. Note that these fields are read only. Click

 

 

the tab at the top of the box to order the rules

 

 

according to that tab.

 

No

This is your firewall rule number. The ordering of

 

 

your rules is important as rules are applied in turn.

 

 

The Move field below allows you to reorder your

 

 

rules.

 

Source IP

This is the source address of the packet.

 

Destination IP

This is the destination address of the packet.

 

Service

This is the service to which the rule applies. See

 

 

Table 16-1for more information.

 

Action

This is the specified action for that rule. Note that

Block

 

“block” means the firewall silently discards the

Forward

 

packet.

 

 

Log

This field shows you if a log is created for packets

Match

 

that match the rule, don’t match the rule, both or no

Not Match

 

log is created.

 

Both

 

 

 

 

None

Alert

This field tells you whether this rule generates an

Yes

 

alert or not when the rule is matched.

No

 

 

 

 

 

Apply

Press this button to create a new firewall rule. New

 

 

firewall rules are added at the end after existing

 

 

firewall rules. See section 16.5.1 for more details.

 

 

 

 

Edit

Press this button to edit an existing filter rule. See

 

 

 

 

Creating Custom Rules

16-7

Page 187
Image 187
ZyXEL Communications P-312 manual Block, Match