Inbound: Basic
Inbound Security is by default set to Deny all access initiated by hosts from the Internet.
Please review the earlier discussion for background information on the issues involved.
There are a few occasions when an Internet based host needs to initiate communications with
a PC on the office network. A common example is when a mail server is located in the office
network, inside the firewall. It is frequently necessary for the mail server to receive incoming
connections from mail hosts on the Internet, and this requires an access path through the
firewall to be set up.
Firewall, Basic Inbound
The access path is referred to as a ‘Pinhole’ through the firewall. A Pinhole is an access path
which is as restricted as possible. In this case it specifies the mail server as the sole target,
and the email protocol as the sole communications protocol. Since any mail server may have
email for the office it is not possible to specify the IP address of the host which initiates the
communication.
The Basic screen above provides the simplest approach to creating a Pinhole. The Add
Pinhole table permits the selection of a specified protocol from the drop down menu to be
connected to a specified local (internal) IP address.
If you are unsure of what local IP address you should use you can click on the [lookup] link
which will show you all PCs the Mako is aware of behind it.
Once you have added a rule you can edit it by clicking on the Spanner icon.
Mako Networks Mako 7550-E Product Handbook v.1.1
Page 37
