ZyXEL Communications Prestige 652, User Manual, Page: 158 / 521

Prestige 652 Series User’s Guide
13-6 Creating Custom Rules
Table 13-1 Firewall Rules Summary: First Screen
LABEL DESCRIPTION
No. This is your firewall rule number. The ordering of your rules is important as
rules are applied in turn. The
Move field below allows you to reorder your rules.
Click a rule’s number to edit the rule.
Source IP This is the source address of the packet. Please note that a blank source or
destination address is equivalent to
Any .
Destination IP This is the destination address of the packet. Please note that a blank source or
destination address is equivalent to
Any .
Service This is the service to which the rule applies. See Table 13-2 for more
information.
Action This is the specified action for that rule, whether to Block (discard) or Forward
(allow the passage of) packets.
Log This field shows you if a log is created for packets that match the rule ( Match ),
don't match the rule ( Not Match ), both ( Both ) or no log is created ( None ).
Rules Reorder You may reorder your rules using this function. Use the drop-sown list box to
select the number of the rule you want to move. The ordering of your rules is
important as rules are applied in turn.
To Rule Number Use the drop-sown list box to select to where you want to move the rule.
Move Click Move to move the rule.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the Prestige.
Cancel Click Cancel to return to the previously saved settings.
13.6 Predefined Services
The Available Services list box in the Edit Rule screen (see Figure 13-4 ) displays all predefined services
that the Prestige already supports. Next to the name of the service, two fields appear in brackets. The first
field indicates the IP protocol type (TCP, UDP, or ICMP). The second field indicates the IP port number that
defines the service. (Note that there may be more than one IP protocol type. For example, look at the default
configuration labeled “(
DNS )”.
(UDP/TCP:53)
means UDP port 53 and TCP port 53. Up to 128 entries are
supported. Custom services may also be configured using the Custom Ports function discussed later.