Example Firewall Rule - ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 User Manual

ZyWALL 5/35/70 Series User's Guide
Table 75 Predefined Services (continued)
SERVICE
SIP-V2(UDP:5060)
SMTP(TCP:25)
SNMP(TCP/UDP:161)
SNMP-TRAPS(TCP/UDP:162)
SQL-NET(TCP:1521)
SSDP(UDP:1900)
SSH(TCP/UDP:22)
STRMWORKS(UDP:1558)
SYSLOG(UDP:514)
TACACS(UDP:49)
TELNET(TCP:23)
TFTP(UDP:69)
VDOLIVE(TCP:7000)
Microsoft RDP(TCP:3389)
VNC(TCP:5900)
NTP(TCP/UDP:123)

11.12 Example Firewall Rule

The following Internet firewall rule example allows a hypothetical My Service connection
from the Internet.
1 In the Service screen, click Add to open the Edit Custom Service screen.
231
DESCRIPTION
The Session Initiation Protocol (SIP) is an application-layer control
(signaling) protocol that handles the setting up, altering and tearing
down of voice and multimedia sessions over the Internet. SIP is used
in VoIP (Voice over IP), the sending of voice signals over the Internet
Protocol.
Simple Mail Transfer Protocol is the message-exchange standard for
the Internet. SMTP enables you to move messages from one e-mail
server to another.
Simple Network Management Program.
Traps for use with the SNMP (RFC:1215).
Structured Query Language is an interface to access data on many
different types of database systems, including mainframes, midrange
systems, UNIX systems and network servers.
Simple Service Discovery Protocol (SSDP) is a discovery service
searching for Universal Plug and Play devices on your home network
or upstream Internet gateways using UDP port 1900.
Secure Shell Remote Login Program.
Stream Works Protocol.
Syslog allows you to send system logs to a UNIX server.
Login Host Protocol used for (Terminal Access Controller Access
Control System).
Telnet is the login and terminal emulation protocol common on the
Internet and in UNIX environments. It operates over TCP/IP networks.
Its primary function is to allow users to log into remote host systems.
Trivial File Transfer Protocol is an Internet file transfer protocol similar
to FTP, but uses the UDP (User Datagram Protocol) rather than TCP
(Transmission Control Protocol).
Another videoconferencing solution.
Microsoft offers terminal services through RDP (Remote Desktop
Protocol) to allow RDP clients to connect to a Windows terminal
server using UDP port 3389.
Virtual Network Computing (VNC) is used for remote connection
(desktop sharing) between a VNC server and a VNC viewer on TCP
port 5900.
NTP (Network Time Protocol) is commonly used to synchronize the
time with a remote time server.
Chapter 11 Firewall Screens