ZyXEL Communications 10 - Manual (Page 200)

ZyWALL 10~100 Series Internet Security Gateway
16-4 Creating Custom Rules
16.3 Connection Direction Examples
This section describes examples for firewall rules for connections going from LAN to WAN and from WAN
to LAN. Rules for the DMZ work in a similar fashion.
LAN to LAN/ZyWALL, WAN to WAN/ZyWALL and DMZ to DMZ/ZyWALL rules apply to packets
coming in on the associated interface (LAN, WAN, or DMZ respectively). LAN to LAN/ZyWALL means
policies for LAN-to-ZyWALL (the policies for managing the ZyWALL through the LAN interface) and
policies for LAN-to-LAN (the policies that control routing between two subnets on the LAN).
Similarly, WAN to WAN/ZyWALL and DMZ to DMZ/ZyWALL polices apply in the same way to the WAN
and DMZ ports.
16.3.1 LAN to WAN Rules
The default rule for LAN to WAN traffic is that all users on the LAN are allowed non-restricted access to the
WAN. When you configure a LAN to WAN rule, you in essence want to limit some or all users from
accessing certain services on the WAN. See the following figure.
Figure 16-1 LAN to WAN Traffic
16.3.2 WAN to LAN Rules
The default rule for WAN to LAN traffic blocks all incoming connections (WAN to LAN). If you wish to
allow certain WAN users to have access to your LAN, you will need to create custom rules to allow it.