Zyxel-communications ZYWALL10 Manual do Utilizador descarregar pdf (Página 217)

ZyWALL 10 Internet Security Gateway

19-6 Example Firewall Rules

Step 5. When you have finished configuring your rules, the Rule Summary screen should look like this.

Click Apply in this screen to save your configuration back to the ZyWALL.

Figure 19-5 Example 1: Rule Summary Screen

19.1.2 Example 2: Small Office With Mail, FTP and Web Servers

A small office has:

i. A mail server with an IP of 192.168.10.2.

ii. Two FTP servers. You want FTP server One (IP of 192.168.10.3) to be accessible from the

Internet, but FTP server Two (192.168.10.4) may only be accessed by internal users, i.e., from the

local network.

iii. HTTP proxy server at 192.168.10.5.

You want:

i. To send alerts when there is an attack.

ii. To only allow access to the Internet from the HTTP proxy server and your mail server.

iii. To only allow FTP server One to be accessible from the Internet.

Log of packets should

match this rule in the

ACL Default Set.

The first rule is a default rule to

allow DHCP negotiation

between the ISP and the

ZyWALL 10. The second rule

is what we configured in the

last 2 screens. See Table 16-1

Click Apply in this screen when you have

finished configuring to save your

configuration back to the ZyWALL.

Block packets that don’t

match the rules specified

below.

1 2 ... 212 213 214 215 216 217 218 219 220 221 222 ... 266 267

Sem comentários

Zyxel-communications ZYWALL10 Manual do Utilizador Página 217