Accepting Connections To The Internet From The Internal Network - D-Link DFL-500 User Manual

•
To addresses on the Internet (see
•
To services (see Services)
•
According to a one-time or recurring schedule (see Schedules)
Since policy matching works on a first-match principle, you must add deny policies above the default policy.
You must also add deny policies above matching policies that accept connections. For more information, see
Policy matching and Arranging policies in the policy
Adding a policy to deny connections
•
Add addresses, services, or schedules as required.
•
Go to Firewall > Policy > Int to Ext . In Transparent mode go to Firewall > Policy > Outgoing .
•
Click New to add a policy.
You can also click Insert Policy before
policy.
•
Configure the policy to match the connection to block and set Action to DENY.
For descriptions of the policy fields, see
•
Click OK to save the policy.
Policy to deny FTP connections to the Internet from an internal subnet:

Accepting connections to the Internet from the internal network

Create policies that accept connections to the Internet from the internal network to control the connections
that are available.
You can use policies to accept connections:
•
From addresses on your internal network (see
•
To addresses on the Internet (see
•
To services (see Services)
•
According to a one-time or recurring schedule (see Schedules)
Policies that accept connections can be used in the following ways:
•
Add policies that accept connections as exceptions to policies that deny connections
DFL-500 User's Manual
Adding addresses)
list.
on a policy in the list to add the new policy above a specific
Adding policies.
Adding addresses)
Adding addresses)
29