ZyXEL Communications ISG50-ISDN User Manual page 357

Integrated service gateway
Hide thumbs Also See for ISG50-ISDN:
Table of Contents

Advertisement

Now you configure a LAN1 to WAN firewall rule that allows IRC traffic from the IP address of the
CEO's computer (192.168.1.7 for example) to go to any destination address. You do not need to
specify a schedule since you want the firewall rule to always be in effect. The following figure shows
the results of your two custom rules.
Figure 235 Limited LAN to WAN IRC Traffic Example
LAN1
Your firewall would have the following configuration.
Table 115 Limited LAN1 to WAN IRC Traffic Example 1
#
USER
1
Any
2
Any
3
Any
• The first row allows the LAN1 computer at IP address 192.168.1.7 to access the IRC service on
the WAN.
• The second row blocks LAN1 access to the IRC service on the WAN.
• The third row is the firewall's default policy of allowing all traffic from the LAN1 to go to the WAN.
Alternatively, you configure a LAN1 to WAN rule with the CEO's user name (say CEO) to allow IRC
traffic from any source IP address to go to any destination address.
Your firewall would have the following configuration.
Table 116 Limited LAN1 to WAN IRC Traffic Example 2
#
USER
1
CEO
2
Any
3
Any
• The first row allows any LAN1 computer to access the IRC service on the WAN by logging into the
ISG50 with the CEO's user name.
• The second row blocks LAN1 access to the IRC service on the WAN.
• The third row is the firewall's default policy of allowing all traffic from the LAN1 to go to the WAN.
ISG50 User's Guide
ISG
SOURCE
DESTINATION
192.168.1.7
Any
Any
Any
Any
Any
SOURCE
DESTINATION
Any
Any
Any
Any
Any
Any
SCHEDULE
SERVICE
Any
IRC
Any
IRC
Any
Any
SCHEDULE
SERVICE
Any
IRC
Any
IRC
Any
Any
Chapter 23 Firewall
ACTION
Allow
Deny
Allow
ACTION
Allow
Deny
Allow
357

Advertisement

Table of Contents
loading

This manual is also suitable for:

Isg50

Table of Contents