Quick Reference Guide

ProSafe VPN Firewall 50 FVS338 Reference Manual
Firewall Protection and Content Filtering 4-5
v1.0, January 2010
server or game server) visible and available to the Internet. The rule tells the VPN firewall to direct
inbound traffic for a particular service to one local server based on the destination port number.
This is also known as port forwarding.
Whether or not DHCP is enabled and how the PCs will access the servers LAN address impact the
inbound rules. For example:
If your external IP address is assigned dynamically by your ISP (DHCP enabled), the IP
address may change periodically as the DHCP lease expires. Consider using dynamic DNS so
that external users can always find your network (see “Configuring Dynamic DNS (Optional)”
on page 2-14).
If the IP address of the local server PC is assigned by DHCP, it may change when the PC is
rebooted. To avoid this, use the Reserved IP address feature to keep the PC’s IP address
constant (see “Setting Up DHCP Address Reservation” on page 3-9).
Local PCs must access the local server using the local LAN address of the PC. Attempts by
local PCs to access the server using the external WAN IP address will fail.
Note: See “Configuring Port Triggering” on page 4-33 for yet another way to allow
certain types of inbound traffic that would otherwise be blocked by the VPN
firewall.
Table 4-2. Inbound Rules Fields
Item Description
Services Select the desired service or application to be covered by this rule. If the desired
service or application does not appear in the list, you must define it using the
Services screen (see “Adding Customized Services” on page 4-20).
Action Select the desired action for packets covered by this rule:
BLOCK always
BLOCK by schedule, otherwise Allow
ALLOW always
ALLOW by schedule, otherwise Block
Note: Any inbound traffic which is not allowed by rules you create will be blocked by
the Default rule.
Select Schedule Select the desired time schedule (Schedule1, Schedule2, or Schedule3) that will be
used by this rule.
This pull-down menu gets activated only when “BLOCK by schedule, otherwise
Allow” or “ALLOW by schedule, otherwise Block” is selected as Action.
Use the Schedule screen to configure the time schedules.