Difference between revisions of "Firewall Rules"

Revision as of 14:00, 19 July 2014

Firewall Rules Admin Page

This page allows you to customize your firewall rules, even disabling the firewall. When first opened you will notice that there are several predefined rules already in place.

from 0810 to 10.04

Options

Protocol

Here is where you can choose the protocol involved with this rule, or define any protocol by choosing 'IP':

• TCP
• UDP
• IP

IP version

Here you can choose if you want the rule to be active for IPv4, IPv6 or both.

Source Ports

Choose the Ports to be used in the rule. If you chose 'IP' in the Protocol section then you can define your IP protocol (NOT PORT !!!) number here.

Destination Port

Port to forward requests to.

This option is only available if Port Forwarding is selected in the Rule Type

Destination IP

IP Address of the computer being forwarded to.

This option is only available if Port Forwarding is selected in the Rule Type

Rule Type

There are two types of rules available:

• Core Input
• Port Forward

Limit IP

You can limit rules to specific IP addresses.

It looks like you can add the mask to specify ranges: 134.78.0.0/16

from 1204

Select Firewall

select the firewall version (ipv4/ipv6).

Advanced Firewall Settings

if selected you see the rules defined on all default or manual defined chains.

Show all unprocessed rules

show all rules even if they are not set to the firewall.

Block TOP20 known attackers

Greps a list every hour and set those on the chain Blocklist, a list with the TOP 20 known attackers are blocked to the system.

Options

[[Image:

Input Interface

optioneel. setting if you chose input or forward.

Output Interface

optioneel. setting if you choose output or forward

Rule matching

optioneel

Protocol

Here is where you can choose the protocol involved with this rule, or define any protocol by choosing 'IP':

• TCP
• UDP
• TCP & UDP
• IP

IP version

Here you can choose if you want the rule to be active for IPv4, IPv6.

Source Ports

Choose the Ports to be used in the rule. If you chose 'IP' in the Protocol section then you can define your IP protocol (NOT PORT !!!) number here.

Destination Port

Destination port on the core. If you chose Port Forward (NAT) then you set 80:80 before the : you set the destination port on the core and after the : you set the port to de destination system

Destination IP

IP Address of the computer being forwarded to.

Rule Type

There are four types of rules available by default:

• Input
• forward
• Port Forward (NAT)
• output

if you add chains then they are listed here too.

the second option is with NAT to set wich type, for Portforward you need prerouting option. ToDo on not Advanced Firewall settings mode set it automaticly to make it easyer.

Limit IP

You can limit rules to specific IP addresses. you can add the mask to specify ranges: 134.78.0.0/16

Description

optioneel Administrative setting for you as user/network maintainer to see why this rule exists.