User's Manual

Chapter 14 Firewall 158
The following table describes the labels in this screen.
Table 62 Security > Firewall > Rules > Add
LABEL DESCRIPTION
Active Select this option to enable this firewall rule.
Action for Matched
Packets
Use the drop-down list box to select whether to discard (Drop), deny and send an
ICMP destination-unreachable message to the sender of (Reject) or allow the
passage of (Permit) packets that match this rule.
IP Version Type Select the IP version, IPv4 or IPv6, to apply this firewall rule to.
Rate Limit Set a maximum number of packets per second, minute, or hour to limit the
throughput of traffic that matches this rule.
Maximum Burst
Number
Set the maximum number of packets that can be sent at the peak rate.
Log This field determines if a log for packets that match the rule is created or not.
Rules/Source Address
Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes: Single Address, Range
Address, Subnet Address and Any
Address.
Start IP Address Enter the single IP address or the starting IP address in a range here.
End IP Address Enter the ending IP address in a range here.
Subnet Mask Enter the subnet mask here, if applicable.
Source Mac Address Specify a source MAC address of traffic to which to apply this firewall rule applies.
Please note that a blank source MAC address is equivalent to any.
Destination Address
Address Type Do you want your rule to apply to packets with a particular (single) IP, a range of IP
addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or any IP address?
Select an option from the drop-down list box that includes: Single Address, Range
Address, Subnet Address and Any
Address.
Start IP Address Enter the single IP address or the starting IP address in a range here.
End IP Address Enter the ending IP address in a range here.
Subnet Mask Enter the subnet mask here, if applicable.
Source Interface Specify a source interface to which this firewall rule applies. This is the interface
through which the traffic entered the Device. Please note that a blank source
interface is equivalent to any.
Service
Available Services Select a service from the Available Services box.