Filter Rules - Funkwerk W1002 Manual

Funkwerk Enterprise Communications GmbH
bintec W1002/W1002n/W2002/WIx040/WIx065

15.1.1 Filter rules

The default behaviour with Action = Access consists of two implicit filter rules: If an in-
coming packet can be assigned to an existing connection and if a suitable connection is ex-
pected (e.g. such as an affiliated connection of an existing connection), the packet is al-
lowed.
The sequence of filter rules in the list is relevant: The filter rules are applied to each packet
in succession until a rule matches. If overlapping occurs, i.e. more than one filter rule
matches a packet, only the first rule is executed. This means that if the first rule denies a
packet, whereas a later rule allows it, the packet is rejected. A deny rule also has no effect
if a relevant packet has previously been allowed by another filter rule.
In the Firewall->Policies->Filter Rules menu, a list of all configured filter rules is shown.
Select the Show administrative access rules option to display existing filter rules for ad-
ministrative access to your device (see System Management->Administrative
Access->Access). These rules can also be edited here.
Firewall Policies
Fig. 116: ->
You can use the button to insert another policy above the list entry. The configuration
menu for creating a new policy opens.
You can use the button to move the list entry. A dialog box opens, in which you can se-
lect the position to which the policy is to be moved.
Moreover, the overview provides the option to show the firewall rules of the underlying set-
tings made in the System Management->Administrative Access->Access menu. To do
Filter Rules
->
15 Firewall
277