The Rules Screen - ZyXEL Communications PMG5318-B20A User Manual

15.3 The Rules Screen

Click Security > Firewall > Rules to display the following screen. This screen displays a list of the
configured firewall rules. Note the order in which the rules are listed.
Note: The ordering of your rules is very important as rules are applied in turn.
Figure 68 Security > Firewall > Rules
The following table describes the labels in this screen.
Table 49 Security > Firewall > Rules
LABEL
Packet Direction
Create a new rule
after rule number
#
Active
Source IP
Destination IP
Service
Action
Log
Modify
PMG5318-B20A User's Guide
DESCRIPTION
Use the drop-down list box to select a direction of travel of packets for which you want to
configure firewall rules.
Select an index number and click Add to add a new firewall rule after the selected index
number. For example, if you select "6", your new rule becomes number 7 and the
previous rule 7 (if there is one) becomes rule 8.
The following read-only fields summarize the rules you have created that apply to traffic
traveling in the selected packet direction. The firewall rules that you configure
(summarized below) take priority over the general firewall action settings in the General
screen.
This is your firewall rule number. The ordering of your rules is important as rules are
applied in turn.
This field displays whether a firewall is turned on or not. Select the check box to enable
the rule. Clear the check box to disable the rule.
This column displays the source addresses or ranges of addresses to which this firewall
rule applies. Please note that a blank source or destination address is equivalent to Any.
This column displays the destination addresses or ranges of addresses to which this
firewall rule applies. Please note that a blank source or destination address is equivalent
to Any.
This column displays the services to which this firewall rule applies.
This field displays whether the firewall silently discards packets (Drop), discards packets
and sends a TCP reset packet or an ICMP destination-unreachable message to the sender
(Reject) or allows the passage of packets (Permit).
This field displays if a log for packets that match the rule is created or not.
Click the Edit icon to go to the screen where you can edit the rule.
Click the Remove icon to delete an existing firewall rule. A window displays asking you to
confirm that you want to delete the firewall rule. Note that subsequent firewall rules move
up by one when you take this action.
Chapter 15 Firewall
131