Installation guide

Wireless ADSL Modem User’s Manual 93
Inbound/Outbound Policy Sample Configuration
This is a sample Inbound/Outbound configuration meant to guide you in making your
own configurations. This configuration does not necessarily provide proper security, it
is meant only as a sample to display the functionality of the Inbound and Outbound
Policies.
Inbound Policy
Sample Configuration: You want your firewall to have the following properties:
• Accept all http IP addresses, except for 204.35.82.1
• Grant FTP access from 101.64.35.4 (external) to 10.0.0.3, 10.0.0.4, 10.0.0.5,
and 10.0.0.6 (all internal).
• Deny all access to FTP Server 10.0.0.6 on the weekend. Converting the access
requirements from above so that the Inbound Policy can understand them yields
the following:
• Deny access from any Src (WAN) IP to any Des (LAN) IP through any source
or destination port and through all protocols.
• Allow access from any Src (WAN) IP to any Des (LAN) IP through port 80
(HTTP), through TCP.
• Deny access from Src (WAN) IP 204.35.82.1 to any Des (LAN) IP through port
80 (HTTP), through TCP.
• Allow access from Src (WAN) IP 101.64.35.4 to Des (LAN) IP 10.0.0.3 ~
10.0.0.6 through port 20 (FTP), through TCP.
• Deny access from any Src (WAN) IP to DB FTP (defined as ) IP through any
source or destination protocol and through all protocols during time period
WEEKEND, where WEEKEND is defined in the Time Group as Saturday,
12:00AM to Sunday, 11:59PM.