CyberGuard SG300 User Manual page 140

The Source Address is the address that the traffic is arriving from.
The Destination Address is the address that the traffic destined to.
Warning
The previous four fields may be set to Any. Any does not match traffic sent or received
by the CyberGuard SG appliance itself, only traffic passing through it.
The four fields above may also be set to None or Any. None matches requests
originating from the Cyber
None matches network traffic that is destined for the CyberGuard SG appliance itself.
This is useful for controlling access to services provided by the CyberGuard SG
appliance, such as the web management console.
Note
When adding a rule, you may either use Predefined addresses or services that have
been added under Definitions, or click New to manually enter an address or service.
The Log option controls whether to log the first packet of the connection to the
CyberGuard SG appliance's system log. You may enter a Log Prefix to make it easier to
identify which rules are being matched when inspecting the system log.
Custom firewall rules
The Custom Firewall Rules and Custom IPv6 Firewall Rules tabs allow firewall
experts to view the current firewall rules and add custom iptables firewall rules.
Note
Only experts on firewalls and iptables are able to add effective custom firewall rules
(further reading can be found at http://www.netfilter.org/documentation/).
136
Firewall