ZyWALL 2 Series User’s Guide

The following table describes the fields in this screen.

 

Table 11-2 Creating/Editing A Firewall Rule

 

 

LABEL

DESCRIPTION

 

 

Active

Check the Active check box to have the ZyWALL use this rule. Leave it unchecked

 

if you do not want the ZyWALL to use the rule after you apply it

Packet

Use the drop-down list box to select the direction of packet travel to which you want

Direction

to apply this firewall rule.

Source Address

Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete

 

to delete one. Please see the next section for more information on adding and

 

editing source addresses.

 

 

Destination

Click DestAdd to add a new address, DestEdit to edit an existing one or

Address

DestDelete to delete one. Please see the following section on adding and editing

 

destination addresses.

 

 

Available/

Please see Table 11-5for more information on services available. Highlight a

Selected

service from the Available Services box on the left, then click >> to add it to the

Services

Selected Services box on the right. To remove a service, highlight it in the

 

Selected Services box on the right, then click <<.

Custom Port

 

 

 

Add

Click this button to bring up the screen that you use to configure a new custom

 

service that is not in the predefined list of services.

 

 

Edit

Select a custom service (denoted by an “*”) from the Available Services list and

 

click this button to edit the service.

Delete

Select a custom service (denoted by an “*”) from the Available Services list and

 

click this button to remove the service.

 

 

Block Services according to this schedule :

 

 

Day to Block

Select everyday or the day(s) of the week to activate blocking.

 

 

Time of Day to

Select All Day or enter the start and end times in the hour-minute format to activate

Block (24-Hour

blocking.

Format)

 

 

 

Action for

Use the drop down list box to select whether to discard (Block) or allow the

Matched

passage of (Forward) packets that match this rule.

Packets

 

 

 

11-10

Firewall Screens