ZyXEL Communications PMG5318-B20A, Руководство пользователя

Страница: 131 / 168

Chapter 15 Firewall
PMG5318-B20A User’s Guide
131
15.3 The Rules Screen
Click Security > Firewall > Rules to display the following screen. This screen displays a list of the
configured firewall rules. Note the order in which the rules are listed.
Note: The ordering of your rules is very important as rules are applied in turn.
Figure 68
Security > Firewall > Rules
The following table describes the labels in this screen.
Table 49
Security > Firewall > Rules
LABEL DESCRIPTION
Packet Direction Use the drop-down list box to select a direction of travel of packets for which you want to
configure firewall rules.
Create a new rule
after rule number Select an index number and click Add to add a new firewall rule after the selected index
number. For example, if you select “6”, your new rule becomes number 7 and the
previous rule 7 (if there is one) becomes rule 8.
The following read-only fields summarize the rules you have created that apply to traffic
traveling in the selected packet direction. The firewall rules that you configure
(summarized below) take priority over the general firewall action settings in the General
screen.
# This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
Active This field displays whether a firewall is turned on or not. Select the check box to enable
the rule. Clear the check box to disable the rule.
Source IP This column displays the source addresses or ranges of addresses to which this firewall
rule applies. Please note that a blank source or destination address is equivalent to Any.
Destination IP This column displays the destination addresses or ranges of addresses to which this
firewall rule applies. Please note that a blank source or destination address is equivalent
to Any.
Service This column displays the services to which this firewall rule applies.
Action This field displays whether the firewall silently discards packets (Drop), discards packets
and sends a TCP reset packet or an ICMP destination-unreachable message to the sender
(Reject) or allows the passage of packets (Permit).
Log This field displays if a log for packets that match the rule is created or not.
Modify Click the Edit icon to go to the screen where you can edit the rule.
Click the Remove icon to delete an existing firewall rule. A window displays asking you to
confirm that you want to delete the firewall rule. Note that subsequent firewall rules move
up by one when you take this action.