ZyXEL 2WG Guida Utente

Pagina di 780
Chapter 12 Firewall Screens
ZyWALL 2WG User’s Guide
244
Figure 150   Limited LAN to WAN IRC Traffic Example
Your firewall would have the following configuration.  
• The first row allows the LAN computer at IP address 192.168.1.7 to access the IRC 
service on the WAN. 
• The second row blocks LAN access to the IRC service on the WAN.  
• The third row is (still) the firewall’s default policy of allowing all traffic from the LAN to 
go to the WAN.
The rule for the CEO must come before the rule that blocks all LAN to WAN IRC traffic. If the 
rule that blocks all LAN to WAN IRC traffic came first, the CEO’s IRC traffic would match 
that rule and the ZyWALL would drop it and not check any other firewall rules.
12.3  Firewall Default Rule (Router Mode)
Click SECURITY > FIREWALL to open the Default Rule screen.
Use this screen to configure general firewall settings when the ZyWALL is set to router mode.
Table 67   Limited LAN to WAN IRC Traffic Example
#
SOURCE
DESTINATIO
N
SCHEDULE
SERVICE
ACTION
1
192.168.1.7
Any
Any
IRC
Allow
2
Any
Any
Any
IRC
Drop
Default
Any
Any
Any
Any
Allow