Understanding The Network Access Rule Hierarchy - 3Com OfficeConnect 3C16771 User Manual

106 C
HAPTER
c Source
d Destination

Understanding the Network Access Rule Hierarchy

The rule hierarchy has two basic concepts:
I
I
When evaluating rules, the Internet Firewall uses the
following criteria:
I
I
4: C R
OMMAND EFERENCE
There are three parameters to configure for the Source
item.
Select the Network Access Rule's source port, LAN,
I
WAN, or DMZ, if appropriate, from the Ethernet
menu.
If there are IP address restrictions on the source of
I
the traffic, such as keeping competitors off the
company's Web site, type the starting and ending IP
addresses of the range in the Addr. Range Begin and
Addr. Range End, respectively.
If all IP addresses are affected, type
I
Range Begin box.
There are three parameters to configure for the
Destination item.
Select the Network Access Rule's destination port,
I
LAN, WAN, or DMZ, if appropriate, from the
Ethernet menu.
If there are IP address restrictions on the destination
I
of the traffic, such as limiting Telnet to a remote site,
type the starting and ending IP addresses of the
range in the Addr. Range Begin and Addr. Range
End, respectively.
If all IP addresses are affected, type
I
Range Begin box.
Specific rules override general rules.
Equally specific Deny rules override Allow rules.
A rule defining a specific service is more specific than
the default rule.
A defined Ethernet link, such as LAN, WAN, or DMZ, is
more specific than * (all).
in the Addr.
*
in the Addr.
*