D-Link DFL-1600 User Manual page 137

14.3. Scenarios: IP Rules Configuration
2. Create Rule
Final step is to create the rule that will allow ICMP(Ping) packets to
be received by the external interface of the firewall.
Rules IP Rules
Name: Ping to Ext
Action: Allow
Service: ping-inbound
Source Interface: any
Source Network: all-nets
Destination Interface: core
Destination Network: ip ext
Then click OK
Example:
In this case, we set up a NAT rule in the firewall that will allow us to
browse the Internet from private IP addresses behind the firewall. The
private IP addresses will be translated to the external IP address of the
firewall.
1. Add a "HTTP" service object that use TCP port 80.
2. Add a "DNS" service object that use TCP/UDP port 53 to enable
name resolving service.
3. Create two rules that NAT the services above from the internal
interface on the internal network to any destination interface on any
network.
WebUI
:
1. Create HTTP Service
If no http service is defined, we need to create a new service.
Objects Services
Name: http
Type: TCP
Source: 0-65535
Destination: 80
Then click OK
Add
NAT rule
Add
D-Link Firewalls User's Guide
IP Rule:
TCP/UDP Service:
117