ZyXEL Communications VMG1312-T10C, User Manual

Page: 150 / 238

Chapter 14 Firewall
VMG1312-T10C User’s Guide
158
14.4.1 Rules Add Screen
Use this screen to configure firewall rules. In the Rules screen, select an index number and click
Add or click a rule’s Edit icon to display this screen and refer to the following table for information
on the labels.
Create a new rule
after rule number Select an index number and click Add to add a new firewall rule after the selected
index number. For example, if you select “6”, your new rule becomes number 7 and
the previous rule 7 (if there is one) becomes rule 8.
The following read-only fields summarize the rules you have created that apply to
traffic traveling in the selected packet direction. The firewall rules that you configure
(summarized below) take priority over the general firewall action settings in the
General screen.
# This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
Active This field displays whether a firewall is turned on or not. Select the check box to
enable the rule. Clear the check box to disable the rule.
Source IP Address This column displays the source addresses or ranges of addresses to which this
firewall rule applies. Please note that a blank source or destination address is
equivalent to
Any .
Destination IP Address This column displays the destination addresses or ranges of addresses to which this
firewall rule applies. Please note that a blank source or destination address is
equivalent to
Any .
Service This column displays the services to which this firewall rule applies.
Action This field displays whether the firewall silently discards packets ( Drop ), discards
packets and sends a TCP reset packet or an ICMP destination-unreachable message
to the sender (
Reject ) or allows the passage of packets ( Permit ).
Source Interface This column displays the source interface to which this firewall rule applies. This is
the interface through which the traffic entered the Device. Please note that a blank
source interface is equivalent to
Any .
Destination Interface This column displays the destination interface to which this firewall rule applies. This
is the interface through which the traffic is destined to leave the Device. Please note
that a blank source interface is equivalent to
Any .
Modify Click the Edit icon to go to the screen where you can edit the rule.
Click the Remove icon to delete an existing firewall rule. A window displays asking
you to confirm that you want to delete the firewall rule. Note that subsequent firewall
rules move up by one when you take this action.
Table 62
Security > Firewall > Rules (continued)
LABEL DESCRIPTION