ZyXEL Communications Internet Security Gateway ZyWALL 100 - Manual (Page 177)

ZyWALL 100 Internet Security Gateway
Creating Custom Rules 16-7
FIELD DESCRIPTION
Action This is the specified action for that rule, either Block or Forward. Note that Block
means the firewall silently discards the packet.
Log This field shows you if a log is created for packets that match the rule (Match), don't
match the rule (Not Match), both (Both) or no log is created (None).
Alert This field tells you whether this rule generates an alert (Yes) or not (No) when the
rule is matched.
Insert Type the index number for where you want to put a rule. For example, if you type “6”,
your new rule becomes number 6 and the previous rule 6 (if there is one) becomes
rule 7.
Click Insert to display this screen and refer to the following table for information on
the fields.
Move Select a rule’s Index option button and type a number for where you want to put that
rule. Click Move to move the rule to the number that you typed. The ordering of your
rules is important as they are applied in order of their numbering.
Rule to (Rule
Number) Click a rule's option button and type the number for where you want to put that rule.
Click Apply to save your changes to the ZyWALL. Click Edit to create or edit a rule. Click Delete to
delete an existing firewall rule. Note that subsequent firewall rules move up by one when you take this
action. Click Help for online HTML help on fields in this screen
16.5 Predefined Services
The Available Services list box in the Rule Config(uration) screen (see Figure 16-4) displays all predefined
services that the ZyWALL already supports. Next to the name of the service, two fields appear in brackets.
The first field indicates the IP protocol type (TCP, UDP, or ICMP). The second field indicates the IP port
number that defines the service. (Note that there may be more than one IP protocol type. For example, look at
the default configuration labeled “(DNS)”.
(UDP/TCP:53) means UDP port 53 and TCP port 53. Up to 128
entries are supported. Custom services may also be configured using the Custom Ports function discussed
later.
Table 16-2 Predefined Services
SERVICE DESCRIPTION
AIM/New-ICQ(TCP:5190) AOL’s Internet Messenger service, used as a listening port by ICQ.
AUTH(TCP:113) Authentication protocol used by some servers.
BGP(TCP:179) Border Gateway Protocol.