Chapter 24 Firewall

Now you configure a LAN to WAN firewall rule that allows IRC traffic from the IP address of the CEO’s computer (192.168.1.7 for example) to go to any destination address. You do not need to specify a schedule since you want the firewall rule to always be in effect. The following figure shows the results of your two custom rules.

Figure 315 Limited LAN to WAN IRC Traffic Example

Your firewall would have the following configuration.

Table 110 Limited LAN1 to WAN IRC Traffic Example 1

#

USER

SOURCE

DESTINATION

SCHEDULE

SERVICE

ACTION

1

Any

192.168.1.7

Any

Any

IRC

Allow

 

 

 

 

 

 

 

2

Any

Any

Any

Any

IRC

Deny

 

 

 

 

 

 

 

3

Any

Any

Any

Any

Any

Allow

 

 

 

 

 

 

 

•The first row allows the LAN computer at IP address 192.168.1.7 to access the IRC service on the WAN.

•The second row blocks LAN access to the IRC service on the WAN.

•The third row is the firewall’s default policy of allowing all traffic from the LAN to go to the WAN.

Alternatively, you configure a LAN to WAN rule with the CEO’s user name (say CEO) to allow IRC traffic from any source IP address to go to any destination address.

Your firewall would have the following configuration.

Table 111 Limited LAN1 to WAN IRC Traffic Example 2

#

USER

SOURCE

DESTINATION

SCHEDULE

SERVICE

ACTION

1

CEO

Any

Any

Any

IRC

Allow

 

 

 

 

 

 

 

2

Any

Any

Any

Any

IRC

Deny

 

 

 

 

 

 

 

3

Any

Any

Any

Any

Any

Allow

 

 

 

 

 

 

 

428

 

ZyWALL USG 2000 User’s Guide