ZyXEL Communications ZyWALL 10, Руководство пользователя

Страница: 213 / 254

ZyWALL 10 Internet Security Gateway
19-10 Example Firewall Rules
Figure 19-9 Example 2 - Local Network Rule Summary
Step 8. Now you want an FTP server (IP of 192.168.10.3) to be accessible from the Internet. Remember
the default Internet to Local Network ACL set blocks all traffic from the Internet, so you want to
create a hole for this server. Click the
Internet link to see its Rule Summary screen. Now click
an available No. (rule number) radio button, then click Edit to bring up the Rule
Config (uration) screen. Now click on the DestAdd button under the Destination Address box
and enter the IP of FTP server One (192.168.10.3). Follow the same procedure as shown in
Figure 19-3 and Figure 19-4 .
Step 9. On completing the procedure the Rule Summary for this Internet firewall rules should look like
the following screen. Don’t forget to click Apply when you have finished configuring your
rule(s) to save your settings back to the ZyWALL.
Don’t forget to click Apply to save your settings
back to the ZyWALL.
Rules 1 forwards SMTP and POP traffic from our mail server and
Rule 2 forwards HTTP traffic from the proxy web server. You
don’t want a log.
Check this box to log all
matched rules in the ACL
Default Set.