Chapter 4:
Firewall, Failover & OOB Access
102
Destination Address/Address Range:
The destination IP address/address range to match. This
may be left blank IP address ranges use the format ip/netmask (where netmask
is in bits 1-32)
Input Port Range:
The range of ports to forward to the destination IP. These will be the port(s)
specified when accessing the port forward. These ports need not be the same as
the output port range.
Protocol:
The protocol of the data being forwarded. The options are
TCP
,
UDP
,
TCP and
UDP
,
ICMP
,
ESP
,
GRE,
or
Any.
Output Address:
The target of the port forward. This is an address on the internal network where
packets sent to the Input Interface on the input port range are sent.
Output Port Range:
The port or range of ports that the packets will be redirected to on the Output
Address. Ranges use the format start-finish. Only valid for TCP and UDP
protocols
For example, to forward port 8443 to an internal HTTPS server on 192.168.10.2, the following settings
would be used:
Input Interface: Any
Input Port Range: 8443
Protocol: TCP
Output Address: 192.168.10.2
Output Port Range: 443
4.8.4 Firewall rules
Firewall rules can be used to block or allow traffic through an interface based on port number, the source
and/or destination IP address (range), the direction (ingress or egress) and the protocol. This can be used
to allow custom on-box services, or block traffic based on policy.
To setup a firewall rule:
1.
Navigate to the
System > Firewall
page, and click on the
Firewall Rules
tab
2.
Click
New Firewall Rule
