Figure 100 Limited Lan To Wan Irc Traffic Example; Table 41 Limited Lan To Wan Irc Traffic Example - ZyXEL Communications NBG410W3G User Manual

Chapter 9 Firewall
The ZyXEL Device applies the firewall rules in order. So for this example, when the ZyXEL
Device receives traffic from the LAN, it checks it against the first rule. If the traffic matches (if
it is IRC traffic) the firewall takes the action in the rule (drop) and stops checking the firewall
rules. Any traffic that does not match the first firewall rule will match the default rule and the
ZyXEL Device forwards it.
Now suppose that your company wants to let the CEO use IRC. You can configure a LAN to
WAN firewall rule that allows IRC traffic from the IP address of the CEO's computer. In order
to make sure that the CEO's computer always uses the same IP address, make sure it either:
• has a static IP address,
• or you configure a static DHCP entry for it so the ZyXEL Device always assigns it the
same IP address (see
Now you configure a LAN to WAN firewall rule that allows IRC traffic from the IP address of
the CEO's computer (192.168.1.7 for example) to go to any destination address. You do not
need to specify a schedule since you want the firewall rule to always be in effect. The
following figure shows the results of your two custom rules.

Figure 100 Limited LAN to WAN IRC Traffic Example

LAN
192.168.1.7
Your firewall would have the following configuration.

Table 41 Limited LAN to WAN IRC Traffic Example

#
1
2
Default
• The first row allows the LAN computer at IP address 192.168.1.7 to access the IRC
service on the WAN.
• The second row blocks LAN access to the IRC service on the WAN.
• The third row is (still) the firewall's default policy of allowing all traffic from the LAN to
go to the WAN.
The rule for the CEO must come before the rule that blocks all LAN to WAN IRC traffic. If the
rule that blocks all LAN to WAN IRC traffic came first, the CEO's IRC traffic would match
that rule and the ZyXEL Device would drop it and not check any other firewall rules.
172
Section 5.8 on page 106
CEO
DESTINATIO
SOURCE
N
192.168.1.7 Any
Any Any
Any Any
for information on static DHCP).
WAN
SCHEDULE SERVICE
Any IRC
Any IRC
Any Any
NBG410W3G Series User's Guide
IRC
ACTION
Allow
Drop
Allow