ZPE Nodegrid Bold SR, User Manual

Page: 177 / 227

Setting Values Description
Target
ACCEPT
DROP
REJECT
LOG
RETURN
Source IP/Mask IP address and mask
Reverse match for source
IP/mask TRUE
FALSE
Destination IP/Mask IP address and mask
Reverse match for destination
IP/mask TRUE
FALSE
Input Interface
Any
Available interfaces one value of the list can
be selected
Reverse match for input
interface TRUE
FALSE
Output Interface
Any
Available interfaces one value of the list can
be selected
Reverse match for output
interface TRUE
FALSE
Enable State Match
NEW
ESTABLISHED
RELATED
INVALID
one or multiple States
can be selected
Security
Firewall
Nodegrid acts as a Firewall when configured to do so by an administrator. There are six
built-in default chains, three for IPv4 and three for IPv6. These accept Output, Input and
Forward packets. Additional User chains can be created and deleted if required. For each
chain, the default policy can be set. The default policy is set to
Accept
packages. Default
chains cannot be deleted.
Rules can be created for each chain, by clicking on the chain name. This will list all existing
rules belonging to the chain. Rules can be created, deleted and modified. The following
settings exist for rules. For more details review the iptables documentation.