Rules Overview; Chapter 16 Creating Custom Rules - ZyXEL Communications ZYWALL 10W User Manual

This chapter contains instructions for defining both Local Network and Internet rules. DMZ applies

16.1 Rules Overview

Firewall rules are grouped based on the direction of travel of packets to which they apply:
•
LAN to LAN/ZyWALL
•
LAN to WAN
•
LAN to DMZ
DMZ is not available on all models.
By default, the ZyWALL's stateful packet inspection allows packets traveling in the following directions:
•
LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between networks or
subnets connected to the LAN interface.
•
LAN to WAN
•
LAN to DMZ
•
WAN to DMZ
•
DMZ to WAN
By default, the ZyWALL's stateful packet inspection blocks packets traveling in the following directions:
•
WAN to LAN
•
WAN to WAN/ZyWALL
This prevents computers on the WAN from using the ZyWALL as a gateway to communicate with
other computers on the WAN and/or managing the ZyWALL.
•
DMZ to LAN
•
DMZ to DMZ/ZyWALL
Creating Custom Rules
ZyWALL 10~100 Series Internet Security Gateway
Creating Custom Rules
•
WAN to LAN
•
WAN to WAN/ZyWALL
•
WAN to DMZ
Chapter 16
to the ZyWALL 100.
•
DMZ to LAN
•
DMZ to WAN
•
DMZ to DMZ/ZyWALL
16-1