User Manual

99
5. Firewall, Failover and OOB Access
Protocol Select if the firewall rule will apply to TCP or UDP, TCP and UDP, ICMP, ESP, GRE or Any.
Direction Select the traffic direction the firewall rule will apply to (Ingress = incoming, or Egress).
Action Select the action (Accept or Block) that will be applied to the detected packets that match the
Interface + Port Range + Source/Destination Address Range + Protocol + Direction.
For example, to block all SSH traffic from leaving Dial-Out Interface, the following settings can be used:
Interface: Dial-Out/Cellular
Port Range: 22
Protocol: TCP
Direction: Egress
Action: Block
Firewall rules are processed in a set order- from top to bottom. As such, rule placement is important. For example, with
the following rules, all incoming traffic over the Network Interface is blocked, except when it comes from two assigned IP
addresses (SysAdmin and Tony):
To allow all incoming traffic on all
interfaces from the SysAdmin:
To allow all incoming traffic
from Tony:
To block all incoming traffic
from the Network Interface:
Interface Any Any Network Interface
Port Range Any Any Any
Source MAC Any Any Any
Source IP IP address of SysAdmin IP address of Tony Any
Destination IP Any Any Any
Protocol TCP TCP TCP
Direction Ingress Ingress Ingress
Action Accept Accept Block
However, if the above Rule Order changed so the “Block Everyone Else” rule was second on the list, then the incoming traffic
over the network interface from Tony would be blocked.