ZyXEL Communications 10 - Manual (Page 204)

ZyWALL 10~100 Series Internet Security Gateway
16-8 Creating Custom Rules
Table 16-1 Firewall Rules Summary: First Screen
FIELD DESCRIPTION
Insert Type the index number for where you want to put a rule. For example, if you type “6”,
your new rule becomes number 6 and the previous rule 6 (if there is one) becomes
rule 7.
Click Insert to display this screen and refer to the following table for information on
the fields.
Move Select a rule’s Index option button and type a number for where you want to put that
rule. Click Move to move the rule to the number that you typed. The ordering of your
rules is important as they are applied in order of their numbering.
Rule to (Rule
Number) Click a rule's option button and type the number for where you want to put that rule.
Click Apply to save your changes to the ZyWALL. Click Edit to create or edit a rule. Click Delete to
delete an existing firewall rule. Note that subsequent firewall rules move up by one when you take this
action. Click Help for online HTML help on fields in this screen
16.5 Predefined Services
The Available Services list box in the Rule Config(uration) screen (see Figure 16-4) displays all predefined
services that the ZyWALL already supports. Next to the name of the service, two fields appear in brackets.
The first field indicates the IP protocol type (TCP, UDP, or ICMP). The second field indicates the IP port
number that defines the service. (Note that there may be more than one IP protocol type. For example, look at
the default configuration labeled “(DNS)”.
(UDP/TCP:53) means UDP port 53 and TCP port 53. Up to 128
entries are supported. Custom services may also be configured using the Custom Ports function discussed
later.
Table 16-2 Predefined Services
SERVICE DESCRIPTION
AIM/New-ICQ(TCP:5190) AOL’s Internet Messenger service, used as a listening port by ICQ.
AUTH(TCP:113) Authentication protocol used by some servers.
BGP(TCP:179) Border Gateway Protocol.
BOOTP_CLIENT(UDP:68) DHCP Client.
BOOTP_SERVER(UDP:67) DHCP Server.