ZyXEL Communications Broadband Security Gateway P-312, Руководство пользователя, Страница: 212 / 254

P312 Broadband Security Gateway
19-10 Examples Firewall Rules
Figure 19-9 Example 2 - Local Network Rule Summary
Step 8. Now we want an FTP server (IP of 192.168.10.3) to be accessible from the Internet. Remember
the default Internet to Local Network ACL set blocks all traffic from the Internet, so we want to
create a hole for this server. Click the
Internet link to see its Rule Summary screen. Now click
an available No. (rule number) radio button, then click Edit to bring up the Rule
Config (uration) screen. Now click on the DestAdd button under the Destination Address box
and enter the IP of FTP server One (192.168.10.3). Follow the same procedure as shown in
Figure 19-3 and Figure 19-4 .
Step 9.
On completing the procedure the Rule Summary for this Internet firewall rules should look like
the following screen. Don’t forget to click Apply when you have finished configuring your
rule(s) to save your settings back to the Prestige.
Don’t forget to click Apply to save your settings
back to the Prestige.
Rules 1 forwards SMTP and POP traffic from our mail server and
Rule 2 forwards HTTP traffic from the proxy web server. We don’t
want a log.
Check this box to log all
matched rules in the ACL
Default Set.