ZyXEL Communications ZyWall USG 50-H Series User Manual page 293

Now suppose that your company wants to let the CEO use IRC. You can configure a LAN1 to
WAN firewall rule that allows IRC traffic from the IP address of the CEO's computer. You
can also configure a LAN1 to WAN rule that allows IRC traffic from any computer through
which the CEO logs into the ZyWALL with his/her user name. In order to make sure that the
CEO's computer always uses the same IP address, make sure it either:
• Has a static IP address,
or
• You configure a static DHCP entry for it so the ZyWALL always assigns it the same IP
address (see
Now you configure a LAN1 to WAN firewall rule that allows IRC traffic from the IP address
of the CEO's computer (192.168.1.7 for example) to go to any destination address. You do not
need to specify a schedule since you want the firewall rule to always be in effect. The
following figure shows the results of your two custom rules.
Figure 223 Limited LAN to WAN IRC Traffic Example
Your firewall would have the following configuration.
Table 109 Limited LAN to WAN IRC Traffic Example 1
# USER
1 Any
2 Any
Default Any
• The first row allows the LAN1 computer at IP address 192.168.1.7 to access the IRC
service on the WAN.
• The second row blocks LAN access to the IRC service on the WAN.
• The third row is (still) the firewall's default policy of allowing all traffic from LAN1 to go
to the WAN.
Alternatively, you configure a LAN to WAN rule with the CEO's user name (say CEO) to
allow IRC traffic from any source IP address to go to any destination address.
ZyWALL USG 50-H User's Guide
DHCP Settings on page 215
SOURCE DESTINATION SCHEDULE
192.168.1.7 Any
Any Any
Any Any
for information on DHCP).
SERVICE
Any IRC
Any IRC
Any Any
Chapter 18 Firewall
ACTION
Allow
Deny
Allow
293