D-Link DSR-500, User Manual

Page: 72 / 213

Unified Services Router User Manual
70
5.3.1 Firewall Rule Configuration Examples
Example 1: Allow inbound HTTP traffic to the DMZ
Situation: You host a public web server on your local DMZ network. You want to
allow inbound HTTP requests from any outside IP address to the IP address of your
web server at any time of day.
Solution: Create an inbound rule as follows.
Parameter Value
From Zone Insecure (WAN1/WAN2)
To Zone Public (DMZ)
Service HTTP
Action ALLOW always
Send to Local Server (DNAT IP) 192.168.5.2 (web server IP address)
Destination Users Any
Log Never
Example 2: Allow videoconferencing from range of outside IP addresses
Situation: You want to allow incoming videoconferencing to be initiated from a
restricted range of outside IP addresses (132.177.88.2 - 132.177.88.254), from a
branch office.
Solution: Create an inbound rule as follows. In the example, CUSeeMe (the video
conference service used) connections are allowed only from a specified range of
external IP addresses.
Parameter Value
From Zone Insecure (WAN1/WAN2)
To Zone Secure (LAN)
Service CU-SEEME:UDP
Action ALLOW always
Send to Local Server (DNAT IP) 192.168.10.11
Destination Users Address Range
From 132.177.88.2
To 134.177.88.254
Enable Port Forwarding Yes (enabled)