D-Link DFL-500, Руководство пользователя

Страница: 51 / 140

· Select Insert Policy Before to add a new policy above the default policy.
·
Configure the policy to match the default policy with the following exceptions:
·
Set Service to POP3
·
Set Action to DENY
· Select OK to save the policy.
You must add the deny policy above the default policy in the policy list. For more information on arranging
policies in policy lists, see
Policy matching in detail and Ordering policies in policy lists .
Policy to deny POP3 connections to the Internet from the internal network
Adding policies that accept connections
Policies that accept connections can be used in the following ways:
·
As exceptions to policies that deny connections
For example, if a policy denies connections from a subnet, you can add a policy that accepts connections
from one of the computers on the subnet. Such policies must be added to the policy list above the
connections that they are exceptions to.
· As a replacement for the default policy to accept only the connections that you want the firewall to accept
You can limit access to the Internet to that allowed in the policies that you create. You must delete the
default policy. If the default policy remains in the policy list, all connections that do not match a policy will
be accepted by the default policy.
The following example procedure to accept connections from the internal network to the Internet is similar to
any procedure to accept connections. In this example, the DFL-500 is running in NAT/Route mode.
To accept a connection to the Internet:
·
Add addresses, services, or schedules as required.
·
Go to Firewall > Policy > Int to Ext .
· Select New to add a policy.
You can also select Insert Policy Before on a policy in the list to add the new policy above a specific
policy. You would do this if you were adding an accept policy as an exception to a deny policy.
· Configure the policy to match the type of connection to accept.
Set Action to ACCEPT.
DFL-500 User Manual
51