ZyXEL Communications NBG-4600N User Manual page 186

Chapter 13 Firewall
Table 64 Security > Firewall > Services > Adding a Rule
LABEL
End IP Address
IP Pool List
Service Setup
Available
Services
Blocked
Services
Custom Port
Type
Port Number
Add
Delete
Clear All
Schedule to Block
Day to Block:
Time of Day to
Block (24-Hour
Format)
Log
Active (Log
packets match
this rule)
Misc setting
Bypass Triangle
Route
186
DESCRIPTION
Enter the ending IP address in a range here. This field is only available
when IP Range is selected as the Address Type.
Add an IP address from the IP Pool List to the Selected IP List by
highlighting an IP address and clicking Add. To delete an IP address
from the Selected IP List highlight an IP address and click the Remove
button. These fields are only available when IP Pool is selected as the
Address Type.
The IP Pool list gathers its IPs from entries in the ARP table. The ARP
table contains the IP addresses and MAC addresses of the devices that
have sent traffic to the NBG-460N.
This is a list of pre-defined services (ports) you may prohibit your LAN
computers from using. Select the port you want to block using the drop-
down list and click Add to add the port to the Blocked Services field.
This is a list of services (ports) that will be inaccessible to computers on
your LAN once you enable service blocking.
A custom port is a service that is not available in the pre-defined
Available Services list and you must define using the next two fields.
Choose the IP port (TCP or UDP) that defines your customized port
from the drop down list box.
Enter the port number range that defines the service. For example, if
you want to define the Gnutella service, then select TCP type and enter
a port range from 6345 to 6349.
Select a service from the Available Services drop-down list and then
click Add to add a service to the Blocked Services.
Select a service from the Blocked Services list and then click Delete
to remove this service from the list.
Click Clear All to empty the Blocked Services.
Select a check box to configure which days of the week (or everyday)
you want service blocking to be active.
Select the time of day you want service blocking to take effect.
Configure blocking to take effect all day by selecting All Day. You can
also configure specific times by selecting From and entering the start
time in the Start (hour) and Start (min) fields and the end time in
the End (hour) and End (min) fields. Enter times in 24-hour format,
for example, "3:00pm" should be entered as "15:00".
Select this to log packets that match this rule. Go to the Log Settings
page and select the Access Control logs category to have the NBG-
460N record these logs.
Select this check box to have the NBG-460N firewall ignore the use of
triangle route topology on the network.
NBG-460N User's Guide