Dynamix UM-A User Manual page 118

Time Window Filtering: This field allows you to select a certain time frame from the Time
Group in which this policy will be active. See section 6.6 for more information on Time
Groups.
DB: Short for Database, this field allows you to select a user-defined IP Group for the Src IP
and Dest IP fields and a user-defined Service Group for the Dest Port. User defined IP and
Service Groups are created in IP Group and Service Group pages.
Example : Inbound/Outbound Policies Sample Configuration
This is a sample Inbound/Outbound configuration meant to guide you in making your own
configurations. This configuration does not necessarily provide proper security, it is meant only as a
sample to display the functionality of the Inbound and Outbound Policies.
A. Inbound Policy :
Sample Configuration : You want your firewall to have the following properties:
Accept all http IP addresses, except for 204.35.82.1
Grant FTP access from 101.64.35.4 (external) to 10.0.0.3, 10.0.0.4, 10.0.0.5, and 10.0.0.6 (all
internal).
Deny all access to FTP Server 10.0.0.6 on the weekend.
Converting the access requirements from above so that the Inbound Policy can understand them yields
the following:
Deny access from any Src (WAN) IP to any Des (LAN) IP through any source or destination
port and through all protocols.
Allow access from any Src (WAN) IP to any Des (LAN) IP through port 80 (HTTP), through
TCP.
Deny access from Src (WAN) IP 204.35.82.1 to any Des (LAN) IP through port 80 (HTTP),
through TCP.
Allow access from Src (WAN) IP 101.64.35.4 to Des (LAN) IP 10.0.0.3 ~ 10.0.0.6 through
port 20 (FTP), through TCP.
Deny access from any Src (WAN) IP to DB FTP (defined as ) IP through any source or
destination protocol and through all protocols during time period WEEKEND, where
WEEKEND is defined in the Time Group as Saturday, 12:00AM to Sunday, 11:59PM. It
does not matter which order you input these in as long as you sort them into the correct order
once you are finished.
4/1 Port ADSL Router P 117