User guide

Using Firewall Rules
Chapter 10: Setting Your Security Policy 173
For example, if you want to block all outgoing FTP traffic, except traffic from a specific IP
address, you can create a rule blocking all outgoing FTP traffic and move the rule down in
the Rules table. Then create a rule allowing FTP traffic from the desired IP address and
move this rule to a higher location in the Rules table than the first rule. In the figure below,
the general rule is rule number 2, and the exception is rule number 1.
The ZoneAlarm router will process rule 1 first, allowing outgoing FTP traffic from the
specified IP address, and only then it will process rule 2, blocking all outgoing FTP traffic.