User manual

Chapter 5: Administration Site
156 Cobalt Qube 3 User Manual
• Source Port Number(s). Enter the first and last source port number in the
range of source IP addresses to be matched by this rule. To match any source
port number, leave the Source Port Number fields empty.
• Destination IP Address (Low). Enter the first or lowest destination IP
address in the range of IP addresses to be matched by this rule.
• Destination IP Address (High). Enter the last or highest destination IP
address in the range of IP addresses to be matched by this rule.
• Destination Port Number(s). Enter the first and last destination port
number in the range of destination IP addresses to be matched by this rule.
To match any destination port number, leave the Destination Port Number
fields empty.
• Network Protocol. Enter the network protocol of the packets to be matched
by this rule. The options are: Any Network Protocol, TCP, UDP, ICMP, IPIP
and Encap.
• Network Interface. Enter the network interface of the packets to be
matched by this rule. The options are: Any Network Interface, Primary
Network Interface, Secondary Network Interface or PPP Dialup Interface.
• Policy . Select the policy for this rule chain. The policy determines the action
applied to a packet that meets the criteria of this firewall rule. For definitions
of the policies, see “Policy definitions” on page 153.
• Redirect to Local Port Number. If the REDIRECT policy has been
selected, enter a local port number to which packets that meet the criteria of
this firewall rule are redirected.
If the REDIRECT policy has not been selected, this field is ignored.
5. Click Save .
Modifying a firewall rule
To modify a firewall rule:
1. Select Administration > Network Services > Basic Firewall . The Firewall
Settings table appears.
2. From the Select Section pull-down menu, select Input Rule Chain, Forward
Rule Chain, or Output Rule Chain. The rules table for that chain appears.
✍
Note: To match any destination IP address, leave both the Low and
High Destination IP Address fields empty.