Firewall Rule Configuration Example; Table 109 Limited Lan To Wan Irc Traffic Example 2 - ZyXEL Communications ZyWALL USG 300 User Manual

Unified security gateway

Hide thumbs Also See for ZyWALL USG 300:

Table of Contents

Chapter 20 Firewall

Alternatively, you configure a LAN to WAN rule with the CEO's user name (say CEO) to

allow IRC traffic from any source IP address to go to any destination address.

Your firewall would have the following configuration.

• The first row allows any LAN computer to access the IRC service on the WAN by logging

into the ZyWALL with the CEO's user name.

• The second row blocks LAN access to the IRC service on the WAN.

• The third row is the firewall's default policy of allowing all traffic from the LAN to go to

The rule for the CEO must come before the rule that blocks all LAN to WAN IRC traffic. If

the rule that blocks all LAN to WAN IRC traffic came first, the CEO's IRC traffic would

match that rule and the ZyWALL would drop it and not check any other firewall rules.

20.1.4 Firewall Rule Configuration Example

The following Internet firewall rule example allows a hypothetical MyService from the WAN

to IP addresses 192.168.1.10 through 192.168.1.15 (Dest_1) on the LAN.

1 Click Firewall. Click the Add icon (

entry. Remember the sequence (priority) of the rules is important since they are applied

DESTINATION SCHEDULE

) in the heading row to configure a new first

ZyWALL USG 300 User's Guide