ZyWALL 10 Internet Security Gateway
Step 5. When you have finished configuring your rules, the Rule Summary screen should look like this. Click Apply in this screen to save your configuration back to the ZyWALL.
Block packets that don’t match the rules specified below.
Log of packets should match this rule in the ACL Default Set.
The first rule is a default rule to allow DHCP negotiation between the ISP and the ZyWALL 10. The second rule is what we configured in the last 2 screens. See Table
Click Apply in this screen when you have finished configuring to save your configuration back to the ZyWALL.
Figure 19-5 Example 1: Rule Summary Screen
19.1.2 Example 2: Small Office With Mail, FTP and Web Servers
A small office has:
i.A mail server with an IP of 192.168.10.2.
ii.Two FTP servers. You want FTP server One (IP of 192.168.10.3) to be accessible from the Internet, but FTP server Two (192.168.10.4) may only be accessed by internal users, i.e., from the local network.
iii.HTTP proxy server at 192.168.10.5.
You want:
i.To send alerts when there is an attack.
ii.To only allow access to the Internet from the HTTP proxy server and your mail server.
iii.To only allow FTP server One to be accessible from the Internet.
Example Firewall Rules |