all rule as the last rule in the
main
IP rule set. This rule has an
Action
of
Drop
with the source and
destination network set to
all-nets
and the source and destination interface set to
any
.
The service for this rule must also be specified and this should be set to
all_services
in order to
capture all types of traffic.
If the this rule us the only one defined, displaying the
main
IP rule set will be as shown below.
Logging can now be enabled on this rule with the desired severity. Click the Log Settings tab,
and click the Enable logging box. All log messages generated by this rule will be given the
selected severity and which will appear in the text of the log messages. It is up to the
administrator to choose the severity and depends on how they would like to classify the
messages.
Deleting Configuration Objects
If information is deleted from a configuration during editing then these deletes are indicated by
a line scored through the list entry while the configuration is still not yet activated. The deleted
entry only disappears completely when the changes are activated.
For example, we can delete the drop all IP rule created in the previous paragraph by right
clicking the rule and selecting
Delete
in the context menu.
Chapter 3: CorePlus Configuration
49