H.323 With Gatekeeper And Two Netdefend Firewalls - D-Link NetDefendOS User Manual

Create the IP rule that allows traffic from lannet to the gatekeeper:
1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Rule
2. Now enter:
• Name: H323In
• Action: Allow
• Source Interface: lan
• Source Network: lannet
• Destination Interface: dmz
• Destination Network: ip-gatekeeper (IP address of the gatekeeper)
• Service: my_h323_gatekeeper_service
• Comment: Allow incoming communication with the gatekeeper.
3. Click OK
Note: Outgoing calls do not need a specific rule/policy
There is no need to specify a specific rule/policy for outgoing calls. NetDefendOS
monitors the communication between "external" phones and the Gatekeeper to make
sure that it is possible for internal phones to call the external phones that are registered
with the gatekeeper.
Example 6.15. H.323 with Gatekeeper and two NetDefend Firewalls
This scenario is quite similar to scenario 3, with the difference that the NetDefend Firewall is
protecting the "external" phones. The firewall with the Gatekeeper connected to the DMZ should
be configured exactly as in scenario 3. The other firewall should be configured as below. The
rules/policies need to be added to the rule listings, and it should be make sure there are no
rules/policies disallowing or allowing the same kind of ports/traffic before these rules/policies.
493
Chapter 6: Security Mechanisms