ZyXEL Communications Internet Security Gateway ZyWALL 2 Series User Manual
Page 166

ZyWALL 2 Series User’s Guide
11-10
Firewall
Screens
The following table describes the fields in this screen.
Table 11-2 Creating/Editing A Firewall Rule
LABEL
DESCRIPTION
Active
Check the Active check box to have the ZyWALL use this rule. Leave it unchecked
if you do not want the ZyWALL to use the rule after you apply it
Packet
Direction
Use the drop-down list box to select the direction of packet travel to which you want
to apply this firewall rule.
Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete
to delete one. Please see the next section for more information on adding and
editing source addresses.
Destination
Address
Click DestAdd to add a new address, DestEdit to edit an existing one or
DestDelete to delete one. Please see the following section on adding and editing
destination addresses.
Available/
Selected
Services
Please see Table 11-5 for more information on services available. Highlight a
service from the Available Services box on the left, then click >> to add it to the
Selected Services box on the right. To remove a service, highlight it in the
Selected Services box on the right, then click <<.
Custom Port
Add Click this button to bring up the screen that you use to configure a new custom
service that is not in the predefined list of services.
Edit Select a custom service (denoted by an “*”) from the Available Services list and
click this button to edit the service.
Delete Select a custom service (denoted by an “*”) from the Available Services list and
click this button to remove the service.
Block Services according to this schedule :
Day to Block Select everyday or the day(s) of the week to activate blocking.
Time of Day to
Block (24-Hour
Format)
Select All Day or enter the start and end times in the hour-minute format to activate
blocking.
Action for
Matched
Packets
Use the drop down list box to select whether to discard (Block) or allow the
passage of (Forward) packets that match this rule.