D-Link DFL-500, Руководство пользователя

Страница: 49 / 140

· Select New to add a new policy.
·
Configure the policy.
Source
External_All
Destination
The address added in step Add an address for the server to the internal address list.
Schedule
Always
Service
Select a service to match the Internet server
For a web server, select HTTP
Action
Select ACCEPT
· Select OK to save the policy.
Transparent mode policy for public access to a server
The following example policy to accept connections at the external interface and forward them to the internal
interface is similar to any Transparent mode policy.
To add a Transparent mode policy between the external interface and the internal interface:
·
Add an address for the server to the internal interface address list.
See
Adding addresses .
·
Go to Firewall > Policy > Ext to Int .
· Select New to add a new policy.
·
Configure the policy.
Source
External_All
Destination
The address added in step 1.
Schedule
Always
Service
Select a service to match the Internet server
For a web server, select HTTP
Action
Select ACCEPT.
· Select OK to save the policy.
Denying connections from the Internet
Policies that deny connections from the Internet can control access to policies that accept connections from
the Internet.
You can deny connections:
·
From specific Internet addresses
·
To specific internal addresses
·
To specific services
· According to a one-time or recurring schedule
DFL-500 User Manual
49