RedPort WXA-153, Руководство пользователя

Страница: 92 / 131

Page 92 of 131
Traffic Rules Table. When enabled, these rules Allow that particular traffic to pass through the
firewall.
All the rules can easily be enabled (checked) or disabled (unchecked).
The first rule name "ALL", when enabled, means the firewall is totally open and all traffic goes
straight through the firewall. To disable the rule, uncheck it, scroll to the bottom of the page
and hit <Save & Apply>. With the ALL rule disabled, the remaining rules spring into action.
Rules are evaluated from top to bottom. As soon as traffic hits a rule that matches, it will stop.
If there is no match it will continue to the bottom, which is the Reject rule.
For example, if you want to allow all traffic except http traffic:
•
Disable (uncheck) the first rule "ALL-DO NOT MODIFY". This forces the remaining rules
to take precedent.
•
Disable (uncheck) the rule "HTTP-DO NOT MODIFY". This blocks http traffic from
passing through the firewall.
•
When http traffic arrives, it processes down the list of the enabled rules. Because http is
not enabled it continues down the list looking for match. Failing to find a match until it
reachs the last rule "REJECT".
With the ALL rule disabled (unchecked) you can enable/disable the others very quickly. The
next one is DNS. Do you want DNS? Yes (checked), No (unchecked). Do you want http? Yes
(checked), No (unchecked), etc.
You can also create a custom rule.
Scroll down to the bottom of the page to the section "New forward rule"