SonicWALL TELE3 SP, Руководство администратора

Страница: 78 / 210

Network Access Rules Page 77
The Default Allow Rule (#7) at the bottom of the page allows all traffic from the LAN to the
WAN. However, Rule #1 blocks IRC (Chat) traffic from a computer on the LAN to a server on
the WAN.
The
Default Deny Rule (#6) blocks all traffic from the WAN to the LAN, however, Rule #2
overrides this rule by allowing Web traffic from the WAN to the LAN.
Examples
The following examples illustrate methods for creating Network Access Rules .
Blocking LAN access for specific services
This example shows how to block LAN access to NNTP servers on the Internet during business
hours.
1. Click
Add New Rule in the Rules window to launch the Add Network Access Rule Web
browser window.
2. Select Deny from the Action menu.
3. Select NNTP from the Service menu. If the service is not listed in the list, you must to
add it in the Add Service window.
4. Select LAN from the Source Ethernet menu.
5. Since all computers on the LAN are to be affected, enter * in the Source Addr Range
Begin field.
6. Select WAN from the Destination Ethernet menu.
7. Enter * in the Destination Addr Range Begin field to block access to all NNTP servers.
8. Select Apply this rule "from" to configure the time of enforcement.
9. Enter "8:30" and "17:30" in the hour fields.
10. Select Mon to Fri from the menu.
11. Click Update to add your new Rule.