P-662H/HW-D Series User’s Guide
Chapter 11 Firewall Configuration
183
4
Does a rule that allows Internet users access to resources on the LAN create a security
vulnerability? For example, if FTP ports (TCP 20, 21) are allowed from the Internet to the
LAN, Internet users may be able to connect to computers with running FTP servers.
5
Does this rule conflict with any existing rules?
6
Once these questions have been answered, adding rules is simply a matter of plugging the
information into the correct fields in the web configurator screens.
11.3.3 Key Fields For Configuring Rules
11.3.3.1 Action
Should the action be to
Drop
,
Reject
or
Permit
?
Note:
“Drop” means the firewall silently discards the packet. “Reject” means the
firewall discards packets and sends an ICMP destination-unreachable
message to the sender.
11.3.3.2 Service
Select the service from the
Service
scrolling list box. If the service is not listed, it is necessary
to first define it. See
for more information on predefined services.
11.3.3.3 Source Address
What is the connection’s source address; is it on the LAN or WAN? Is it a single IP, a range of
IPs or a subnet?
11.3.3.4 Destination Address
What is the connection’s destination address; is it on the LAN or WAN? Is it a single IP, a
range of IPs or a subnet?
11.4 Connection Direction
This section describes examples for firewall rules for connections going from LAN to WAN
and from WAN to LAN. Rules for the DMZ work in a similar fashion.
LAN to LAN/ Router, WAN to WAN/ Router and DMZ to DMZ/Router rules applies to
packets coming in on the associated interface (LAN, WAN, or DMZ respectively). LAN to
LAN/ Router means policies for LAN-to-ZyXEL Device (the policies for managing the
ZyXEL Device through the LAN interface) and policies for LAN-to-LAN (the policies that
control routing between two subnets on the LAN). Similarly, WAN to WAN/ Router and
DMZ to DMZ/ Router polices apply in the same way to the WAN and DMZ ports.
Summary of Contents for 802.11g ADSL 2+ 4-Port Security Gateway HW-D Series
Page 2: ......
Page 10: ...P 662H HW D Series User s Guide 10 Customer Support ...
Page 24: ...P 662H HW D Series User s Guide 24 Table of Contents ...
Page 32: ...P 662H HW D Series User s Guide 32 List of Figures ...
Page 38: ...P 662H HW D Series User s Guide 38 List of Tables ...
Page 64: ...P 662H HW D Series User s Guide 64 Chapter 2 Introducing the Web Configurator ...
Page 84: ...P 662H HW D Series User s Guide 84 Chapter 4 Bandwidth Management Wizard ...
Page 108: ...P 662H HW D Series User s Guide 108 Chapter 5 WAN Setup ...
Page 122: ...P 662H HW D Series User s Guide 122 Chapter 6 LAN Setup ...
Page 156: ...P 662H HW D Series User s Guide 156 Chapter 8 DMZ ...
Page 202: ...P 662H HW D Series User s Guide 202 Chapter 11 Firewall Configuration ...
Page 210: ...P 662H HW D Series User s Guide 210 Chapter 12 Anti Virus Packet Scan ...
Page 214: ...P 662H HW D Series User s Guide 214 Chapter 13 Content Filtering ...
Page 232: ...P 662H HW D Series User s Guide 232 Chapter 14 Content Access Control ...
Page 238: ...P 662H HW D Series User s Guide 238 Chapter 15 Introduction to IPSec ...
Page 273: ...P 662H HW D Series User s Guide Chapter 17 Certificates 273 Figure 144 My Certificate Details ...
Page 292: ...P 662H HW D Series User s Guide 292 Chapter 18 Static Route ...
Page 304: ...P 662H HW D Series User s Guide 304 Chapter 19 Bandwidth Management ...
Page 308: ...P 662H HW D Series User s Guide 308 Chapter 20 Dynamic DNS Setup ...
Page 332: ...P 662H HW D Series User s Guide 332 Chapter 22 Universal Plug and Play UPnP ...
Page 338: ...P 662H HW D Series User s Guide 338 Chapter 23 System ...
Page 344: ...P 662H HW D Series User s Guide 344 Chapter 24 Logs ...
Page 350: ...P 662H HW D Series User s Guide 350 Chapter 25 Tools ...
Page 364: ...P 662H HW D Series User s Guide 364 Chapter 27 Troubleshooting ...
Page 368: ...P 662H HW D Series User s Guide 368 Product Specifications ...
Page 372: ...P 662H HW D Series User s Guide 372 Appendix C Wall mounting Instructions ...
Page 408: ...P 662H HW D Series User s Guide 408 Appendix F Wireless LANs ...
Page 420: ...P 662H HW D Series User s Guide 420 Appendix H Command Interpreter ...
Page 436: ...P 662H HW D Series User s Guide 436 Appendix L NetBIOS Filter Commands ...
Page 462: ...P 662H HW D Series User s Guide 462 Appendix M Internal SPTGEN ...
Page 484: ...P 662H HW D Series User s Guide 484 Appendix P Triangle Route ...