Figure 86 Security > Firewall > Rules; Table 53 Security > Firewall > Rules - ZyXEL Communications P-660HN User Manual

Chapter 9 Firewalls
Click Security > Firewall > Rules to bring up the following screen. This screen displays a list
of the configured firewall rules. Note the order in which the rules are listed.
Figure 86 Security > Firewall > Rules
The following table describes the labels in this screen.
Table 53 Security > Firewall > Rules
LABEL
Firewall Rules
Storage Space
in Use
Packet
Direction
Create a new
rule after rule
number
#
Active
Source IP
Destination IP
Service
Action
Schedule
Log
158
DESCRIPTION
This read-only bar shows how much of the ZyXEL Device's memory for recording
firewall rules it is currently using. When you are using 80% or less of the storage
space, the bar is green. When the amount of space used is over 80%, the bar is red.
Use the drop-down list box to select a direction of travel of packets for which you
want to configure firewall rules.
Select an index number and click Add to add a new firewall rule after the selected
index number. For example, if you select "6", your new rule becomes number 7 and
the previous rule 7 (if there is one) becomes rule 8.
The following read-only fields summarize the rules you have created that apply to
traffic traveling in the selected packet direction. The firewall rules that you configure
(summarized below) take priority over the general firewall action settings in the
General screen.
This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
This field displays whether a firewall is turned on or not. Select the check box to
enable the rule. Clear the check box to disable the rule.
This drop-down list box displays the source addresses or ranges of addresses to
which this firewall rule applies. Please note that a blank source or destination
address is equivalent to Any.
This drop-down list box displays the destination addresses or ranges of addresses to
which this firewall rule applies. Please note that a blank source or destination
address is equivalent to Any.
This drop-down list box displays the services to which this firewall rule applies. See
Appendix E on page 371 for more information.
This field displays whether the firewall silently discards packets (Drop), discards
packets and sends a TCP reset packet or an ICMP destination-unreachable
message to the sender (Reject) or allows the passage of packets (Permit).
This field tells you whether a schedule is specified (Yes) or not (No).
This field shows you whether a log is created when packets match this rule (Yes) or
not (No).
P-660HN-Fx User's Guide