The Firewall General Screen; Firewall Rules Overview - ZyXEL Communications P-660HW-Tx v3 User Manual

Chapter 9 Firewalls

9.2 The Firewall General Screen

9.2.1 Firewall Rules Overview

Your customized rules take precedence and override the ZyXEL Device's default
settings. The ZyXEL Device checks the source IP address, destination IP address
and IP protocol type of network traffic against the firewall rules (in the order you
list them). When the traffic matches a rule, the ZyXEL Device takes the action
specified in the rule.
Firewall rules are grouped based on the direction of travel of packets to which they
apply:
• LAN to LAN/ Router
• LAN to WAN
Note: The LAN includes both the LAN port and the WLAN.
By default, the ZyXEL Device's stateful packet inspection allows packets traveling
in the following directions:
• LAN to LAN/ Router
These rules specify which computers on the LAN can manage the ZyXEL Device
(remote management) and communicate between networks or subnets
connected to the LAN interface (IP alias).
Note: You can also configure the remote management settings to allow only a specific
computer to manage the ZyXEL Device.
• LAN to WAN
These rules specify which computers on the LAN can access which computers or
services on the WAN.
By default, the ZyXEL Device's stateful packet inspection drops packets traveling
in the following directions:
• WAN to LAN
These rules specify which computers on the WAN can access which computers
or services on the LAN.
Note: You also need to configure NAT port forwarding (or full featured NAT address
mapping rules) to allow computers on the WAN to access devices on the LAN.
186
• WAN to LAN
• WAN to WAN/ Router
P-660HW-Tx v3 User's Guide