Zyxel-communications ZYWALL10 Manual de usuario Pagina 190
- Pagina / 267
- Tabla de contenidos
- SOLUCIÓN DE PROBLEMAS
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
ZyWALL 10 Internet Security Gateway
Creating Custom Rules 16-1
Chapter 16
Creating Custom Rules
This chapter contains instructions for defining both Local Network and Internet rules.
16.1 Rules Overview
Firewall rules are subdivided into “Local Network” and “Internet”. By default, the ZyWALL’s stateful
packet inspection allows all communications to the Internet that originate from the local network, and blocks
all traffic to the LAN that originates from the Internet. You may define additional rules and sets or modify
existing ones but please exercise extreme caution in doing so.
If you try to configure rules but do not have a good understanding of how rules work,
you might inadvertently introduce security risks to the firewall and to the protected
network. You should be sure you test your rules after you configure them.
For example, you may create rules to:
♦ Block certain types of traffic, such as IRC (Internet Relay Chat), from the LAN to the Internet.
♦ Allow certain types of traffic, such as Lotus Notes database synchronization, from specific hosts on the
Internet to specific hosts on the LAN.
♦ Allow everyone except your competitors to access a Web server.
♦ Restrict use of certain protocols, such as Telnet, to authorized users on the LAN.
These custom rules work by comparing network traffic’s Source IP address, Destination IP address, IP
protocol type to rules set by the administrator. Your customized rules take precedence, and may override the
ZyWALL’s default rules.
16.2 Rule Logic Overview
Study these points carefully before beginning to configure rules.
16.2.1 Rule Checklist
1. State the intent of the rule. For example, “This restricts all IRC access from the LAN to the Internet.” Or,
“This allows a remote Lotus Notes server to synchronize over the Internet to an inside Notes server.”
2. Is the intent of the rule to forward or block traffic?
3. What is the direction connection: from the LAN to the Internet, or from the Internet to the LAN?
4. What IP services will be affected?
- ZyWALL 10 1
- Copyright 2
- (FCC) Interference Statement 3
- ZyXEL Limited Warranty 7
- Customer Support 8
- Table of Contents 9
- List of Figures 17
- List of Tables 23
- Part I: 29
- Chapter 1 31
- Getting to Know Your ZyWALL 31
- Chapter 2 35
- 2.4 Turn On Your ZyWALL 38
- Table 2-2 Main Menu Commands 39
- 2.5.1 Main Menu 40
- Table 2-3 Main Menu Summary 41
- 2.5.3 SMT Menus at a Glance 42
- 2.7 General Setup 43
- 2.7.1 Dynamic DNS 44
- 2.8 WAN Setup 46
- 2.9 LAN Setup 47
- 2.9.1 LAN Port Filter Setup 48
- Chapter 3 49
- Internet Access 49
- 3.1.4 Private IP Addresses 50
- 3.1.5 RIP Setup 51
- 3.1.6 IP Multicast 51
- 3.1.7 IP Alias 52
- 3-6 Internet Access 54
- 3.2.1 IP Alias Setup 55
- 3.3 Internet Access Setup 56
- Internet Access 3-9 57
- 3.3.2 PPTP Encapsulation 58
- 3.3.4 PPPoE Encapsulation 59
- 3.4 Basic Setup Complete 61
- Part II: 62
- Chapter 4 63
- Remote Node Setup 63
- 4-2 Remote Node Setup 64
- Table 4-1 Fields in Menu 11.1 64
- 4.1.2 PPPoE Encapsulation 65
- 4.1.3 PPTP Encapsulation 66
- Remote Node Setup 4-5 67
- 4-8 Remote Node Setup 70
- 4.3 Remote Node Filter 71
- 4-10 Remote Node Setup 72
- Chapter 5 73
- IP Static Route Setup 73
- 5.1 IP Static Route Setup 74
- IP Static Route Setup 5-3 75
- Chapter 6 77
- 6.1.3 How NAT works 78
- 6.1.4 NAT Mapping Types 79
- 6.1.6 NAT Application 80
- 6.2 SMT Menus 81
- 6.2.2 Configuring NAT 83
- 6.3 NAT Server Sets 88
- 1026 entry 90
- 6.4 Examples 91
- NAT 6-21 97
- Part III: 98
- Chapter 7 100
- Filter Configuration 100
- Filter Rule 102
- Filter Set 102
- 7.2 Configuring a Filter Set 103
- Filters 7-5 104
- 7.2.3 TCP/IP Filter Rule 106
- 7-8 Filters 107
- Filters 7-9 108
- 7-10 Filters 109
- 7.2.4 Generic Filter Rule 110
- 7-12 Filters 111
- 7.3 Example Filter 112
- 7.4 Filter Types and NAT 114
- 7.5 Firewall 115
- 7.6.2 Remote Node Filters 116
- Chapter 8 118
- SNMP Configuration 118
- 8-2 SNMP 119
- Chapter 9 120
- 1. System Information 122
- 2. Console Port Speed 122
- 9.2.1 System Information 123
- 9.3 Log and Trace 124
- 9.3.2 UNIX Syslog 125
- 2. Packet triggered 127
- 3. Filter log 127
- 4. PPP log 128
- 5. Firewall log 128
- 9.4 Diagnostic 129
- 9.4.1 WAN DHCP 130
- Chapter 10 132
- Maintenance 132
- 10.2 Backup Configuration 133
- 10.3 Restore Configuration 135
- 10.4 Upload Firmware 136
- 10.5 TFTP File Transfer 138
- 10.5.1 Example: TFTP Command 139
- 10.6 FTP File Transfer 140
- Chapter 11 144
- 11.2 Call Control Support 145
- 11.2.2 Call History 146
- 11.3 Time and Date Setting 147
- 11.4 Remote Management Setup 150
- 11.5 Boot Commands 151
- Chapter 12 154
- 12.3.2 System Timeout 155
- Part IV: 156
- Chapter 13 158
- What is a Firewall? 158
- 13.3 Denial of Service 160
- 13.3.2 Types of DoS attacks 161
- 13.4 Stateful Inspection 163
- 13.4.3 TCP Security 165
- 13.4.4 UDP/ICMP Security 166
- 13.4.5 Upper Layer Protocols 166
- 13.5.1 Security In General 167
- Chapter 14 170
- 14.1.1 View Firewall Log 171
- 14.1.2 Attack Types 171
- Table 14-4 View Firewall Log 174
- 14.3.1 Packet Filtering: 175
- 14.3.2 Firewall 176
- Chapter 15 178
- 15.2 Enabling the Firewall 180
- 15.3 E-mail 180
- 15.3.2 What are Logs? 181
- Table 15-1 E-mail 182
- 15.3.3 SMTP Error Messages 183
- 15.3.4 Example E-mail Log 183
- 15.4 Attack Alert 184
- 15.4.2 Half-Open Sessions 185
- Figure 15-6 Attack Alert 186
- Table 15-3 Attack Alert 187
- Chapter 16 190
- Creating Custom Rules 190
- 16.2.2 Security Ramifications 191
- 16.3 Connection Direction 192
- 16.4 Rule Summary 193
- Creating Custom Rules 16-5 194
- 16-6 Creating Custom Rules 195
- 16.5 Predefined Services 196
- 16-8 Creating Custom Rules 197
- Creating Custom Rules 16-9 198
- 16-10 Creating Custom Rules 199
- Creating Custom Rules 16-11 200
- Creating Custom Rules 16-13 202
- 16.6 Timeout 203
- Creating Custom Rules 16-15 204
- Table 16-5 Timeout Menu 204
- Chapter 17 206
- Custom Ports 206
- 17-2 Custom Ports 207
- Table 17-1 Custom Ports 207
- 17-4 Custom Ports 209
- Chapter 18 210
- 18-2 Example Firewall Rules 211
- Table 18-1 Log Screen 211
- Chapter 19 212
- Example Firewall Rules 212
- Internet 223
- Chapter 20 226
- Content Filtering 226
- 20-2 Content Filtering 227
- Figure 20-1 Categories Screen 227
- 20.2 Update List 228
- 20.3 Exempting Computers 229
- 20.4 Customizing 230
- 20.5 Keywords 231
- 20.6 Log Records 232
- Part V: 233
- Chapter 21 235
- Troubleshooting 235
- 21-2 Troubleshooting 236
- Troubleshooting 21-3 237
- Appendix A 239
- Appendix B 241
- Call Connection 242
- PPP Data Connection 242
- Appendix C 243
- Hardware Specifications 243
- Appendix D 244
- Important Safety Instructions 244
- Appendix E 245
- Firewall CLI Commands 245
- H CLI Commands 246
- CLI Commands I 247
- J CLI Commands 248
- CLI Commands K 249
- Appendix F 250
- Power Adapter Specifications 250
- Glossary of Terms 252
- Glossary of Terms O 253
- P Glossary of Terms 254
- Glossary of Terms Q 255
- R Glossary of Terms 256
- Glossary of Terms S 257
- T Glossary of Terms 258
- Glossary of Terms U 259
- V Glossary of Terms 260
- Glossary of Terms W 261
- Index AA 265
- BB Index 266
- Index CC 267
Relacionado con productos y manuales para Hardware Zyxel-communications ZYWALL10
Hardware Zyxel-communications 802.11g Wireless Firewall Router P-320W Manual de usuario
(215 paginas)
(215 paginas)
Hardware Zyxel-communications Internet Security Appliance ZyWALL5UTM 4.0 Manual de usuario
(803 paginas)
(803 paginas)
Hardware Zyxel-communications 802.11g Wireless USB Adapter ZyXEL G-200 Manual de usuario
(11 paginas)
(11 paginas)
(114 paginas)APC AR8001 manuels
Manuels d'utilisation et guides de l'utilisateur pour Accessoires pour portoirs APC AR8001.
Nous fournissons des manuels en pdf 1 APC AR8001 à télécharger gratuitement par type de document : Fiche technique
Comentarios a estos manuales