NETGEAR FVG318 - ProSafe 802.11g Wireless VPN Firewall 8 Router, Справочное руководство

Страница: 62 / 202

Refer
e
nc
e M
anu
al
for
the
Pr
oSafe
802.11
g
Wire
less
VPN Fir
e
wal
l FVG318
5-
4
F
ire
w
all
Pr
otection a
nd Conte
n
t
F
ilte
rin
g
BE
TA
Y
ou may defi
ne additional
rules that
specify exce
ptions to the defaul
t ru
les. By addi
ng
custom
rule
s, you
can
block or
allow
a
cce
ss
ba
sed on the
ser
vice
or application, sourc
e or de
stina
tion
IP
addres
ses, and time
of da
y.
Y
ou can also
ch
oos
e to
log traf
fic that matches or doe
s not
match the
ru
le
yo
u h
av
e defined
.
To
create a new rul
e, cl
ick the
Add
button.
To
edit an existing rule, select its button
on
th
e left sid
e of the
ta
ble
a
nd
c
lick
Edit
.
To
delete an existing rule,
select i
ts
but
ton on the left side
of the table and click
Dele
te
.
To
move an
existing rule to a di
ff
erent position in the table, select
its button on
the left side of the
tabl
e an
d click
Move
. At
the script
prompt
, enter the
numb
er of the
desired new position and
click
OK
.
An
ex
ampl
e
of th
e
menu
for
defini
ng
or edi
ting
a rule is sh
own i
n
Figu
re 5-3
. The parameters are:
•
Service
. From
this list,
select the application or
service to be allowed
or
b
loc
ke
d.
The
list
alrea
dy
displays
many common services
, but yo
u
ar
e not limited
to thes
e choice
s.
U
se the
Servic
es me
nu to add any a
dditiona
l s
ervic
es or
a
pplications that do
not a
lre
ady appe
ar
.
•
Action
. Cho
ose ho
w
yo
u wou
ld
like th
is typ
e of t
raf
fic
to b
e hand
led. Y
ou
can
blo
ck
or
al
low
alwa
ys, or yo
u can
c
ho
os
e
to
b
loc
k or allow
ac
cord
ing
to
th
e sch
ed
ule yo
u
ha
ve
d
efin
ed in the
Sche
du
le me
nu
.
•
Sour
ce Ad
dr
ess
. S
pecify traf
fi
c o
rigi
nating
on
th
e
LAN (
outb
ou
nd
) or
the W
A
N (i
nbo
un
d),
and choose whether you
w
ould like
the traf
fic to be
restricted by source
IP addre
ss. Y
ou
ca
n
sele
ct Any
, a
Single
a
ddress
, or
a
R
ange. If you
se
lect a range
of addres
ses, enter the
ra
nge in
th
e st
art an
d
fin
is
h
bo
xe
s.
If
yo
u se
le
ct
a
si
ngl
e address, enter it in the
start box.
•
Desti
n
ation Ad
dr
ess
.The Destination
Address will be
assu
med to be from
the
opposite
(LAN
or W
AN) of the Source Addre
ss. As with th
e Source Addre
ss, you ca
n sele
ct Any
, a Single
addres
s, or a Range
unless NA
T is enable
d and th
e de
stina
tion is the LAN. In tha
t c
ase, you
must ente
r a Single
LA
N address
in the sta
rt
box.
•
Log
. Y
ou
can
select whether the traf
fi
c will be
logged.
The choices are:
•
N
ever — no log entries
w
ill be ma
de for
this service.
•
M
atch — traf
fic
of this
type
that match
es the parameters and acti
on
wi
ll be logged.