beautypg.com

ZyXEL Communications ZyWALL 2 Plus User Manual

Page 194

background image

Chapter 11 Firewall

ZyWALL 2 Plus User’s Guide

194

By default, the ZyWALL allows packets traveling in the following directions.:

By default, the ZyWALL drops packets traveling in the following directions.

• LAN to LAN

These rules specify which computers on the LAN can manage the
ZyWALL (remote management) and communicate between networks or
subnets connected to the LAN interface (IP alias).

"

You can also configure the remote management
settings to allow only a specific computer to
manage the ZyWALL.

• LAN to WAN These rules specify which computers on the LAN can access which

computers or services connected to the WAN. See

Section 11.5 on page

200

for an example.

• WAN to LAN

These rules specify which computers connected to the WAN can
access which computers or services on the LAN. For example, you
may create rules to:

• Allow certain types of traffic, such as Lotus Notes database

synchronization, from specific hosts on the Internet to specific
hosts on the LAN.

• Allow public access to a Web server on your protected network.

You could also block certain IP addresses from accessing it.

"

You also need to configure NAT port forwarding
(or full featured NAT address mapping rules) to
allow computers on the WAN to access devices
on the LAN. See

Section 17.5.3 on page 341

for

an example.