Filter
Top Products
ZyWALL 10 Internet Security Gateway
19-6 Example Firewall Rules
Step 5. When you have finished configuring your rules, the Rule Summary screen should look like this.
Click Apply in this screen to save your configuration back to the ZyWALL.
Figure 19-5 Example 1: Rule Summary Screen
19.1.2 Example 2: Small Office With Mail, FTP and Web Servers
A small office has:
i. A mail server with an IP of 192.168.10.2.
ii. Two FTP servers. You want FTP server One (IP of 192.168.10.3) to be accessible from the
Internet, but FTP server Two (192.168.10.4) may only be accessed by internal users, i.e., from the
local network.
iii. HTTP proxy server at 192.168.10.5.
You want:
i. To send alerts when there is an attack.
ii. To only allow access to the Internet from the HTTP proxy server and your mail server.
iii. To only allow FTP server One to be accessible from the Internet.
Log of packets should
match this rule in the
ACL Default Set.
The first rule is a default rule to
allow DHCP negotiation
between the ISP and the
ZyWALL 10. The second rule
is what we configured in the
last 2 screens. See Table 16-1
Click Apply in this screen when you have
finished configuring to save your
configuration back to the ZyWALL.
Block packets that don’t
match the rules specified
below.