Netgate SG-2100, Руководство пользователя

Страница: 64 / 70

Security Gateway Manual SG-2100
• Click Save
Add rule to pass ICMP to firewall
• Click to add a new rule at the bottom of the list.
• Configure the rule as follows:
Action Pass
Interface OPTx (or the custom name)
Protocol ICMP
ICMP Subtype Any is OK in this case, ICMP is useful but some people prefer to limit to to Echo
Request only to allow ping and nothing else.
Source OPTx Net (or the custom name)
Destination This Firewall (self)
Description
Allow client ICMP to the firewall
• Click
Save
Add rule to reject any other traffic to firewall
• Click to add a new rule at the bottom of the list.
• Configure the rule as follows:
Action Reject
Interface OPTx (or the custom name)
Protocol Any
Source Any
Destination
This Firewall (self)
Description
Reject all other traffic to the firewall
• Click Save
Add rule to reject traffic from this network to private networks
• Click to add a new rule at the bottom of the list.
• Configure the rule as follows:
Action Reject
Interface OPTx (or the custom name)
Protocol Any
Source Any
Destination
Single Host or Alias , PrivateNets (the alias created earlier)
Description
Reject all other traffic to private networks
• Click Save
Add rule to pass from this interface network to any destination:
• Click to add a new rule at the bottom of the list.
• Configure the rule as follows:
© Copyright 2022 Rubicon Communications LLC 62