ZyXEL Communications NBG-460N User Manual page 159

Table 59 Security > Firewall > Services > Adding a Rule
LABEL
Available Services This is a list of pre-defined services (ports) you may prohibit your LAN computers
Blocked Services
Custom Port
Type
Port Number
Add
Delete
Clear All
Schedule to Block
Day to Block:
Time of Day to
Block (24-Hour
Format)
Log
Active (Log
packets match
this rule)
Misc setting
Bypass Triangle
Route
Max NAT/Firewall
Session Per User
Apply
Reset
Cancel
NBG460N User's Guide
DESCRIPTION
from using. Select the port you want to block using the drop-down list and click
Add to add the port to the Blocked Services field.
This is a list of services (ports) that will be inaccessible to computers on your LAN
once you enable service blocking.
A custom port is a service that is not available in the pre-defined Available
Services list and you must define using the next two fields.
Choose the IP port (TCP or UDP) that defines your customized port from the drop
down list box.
Enter the port number range that defines the service. For example, if you want to
define the Gnutella service, then select TCP type and enter a port range from
6345 to 6349.
Select a service from the Available Services drop-down list and then click Add to
add a service to the Blocked Services
Select a service from the Blocked Services list and then click Delete to remove
this service from the list.
Click Clear All to empty the Blocked Services.
Select a check box to configure which days of the week (or everyday) you want
service blocking to be active.
Select the time of day you want service blocking to take effect. Configure blocking
to take effect all day by selecting All Day. You can also configure specific times by
selecting From and entering the start time in the Start (hour) and Start (min)
fields and the end time in the End (hour) and End (min) fields. Enter times in 24-
hour format, for example, "3:00pm" should be entered as "15:00".
Select this to log packets that match this rule. Go to the Log Settings page and
select the Access Control logs category to have the NBG460N record these logs.
Select this check box to have the NBG460N firewall ignore the use of triangle
route topology on the network.
Type a number ranging from 1 to 2048 to limit the number of NAT/firewall sessions
that a host can create.
Click Apply to save the settings.
Click Reset to start configuring this screen again.
Click Cancel to return to the Services screen without saving any changes.
Chapter 13 Firewall
159