User manual ZYXEL ZW50

[. . . ] ZyWALL 50 Internet Security Gateway User's Guide Version 3. 50 November 2001 ZyWALL 50 Internet Security Gateway Copyright Copyright © 2001 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. [. . . ] New firewall rules are added at the end after existing firewall rules. Click Edit to edit an existing filter rule. Click Delete to delete an existing firewall rule. Note that subsequent firewall rules move up by one when you take this action. Click Help for online HTML help on fields in this screen 10-6 Creating Custom Rules ZyWALL 50 Internet Security Gateway 10. 5 Predefined Services The Available Services list box in the Rule Config(uration) screen (see Figure 10-4) displays all predefined services that the ZyWALL already supports. Next to the name of the service, two fields appear in brackets. The first field indicates the IP protocol type (TCP, UDP, or ICMP). The second field indicates the IP port number that defines the service. (Note that there may be more than one IP protocol type. For example, look at the default configuration labeled "(DNS)". (UDP/TCP:53) means UDP port 53 and TCP port 53. Custom services may also be configured using the Custom Ports function discussed later. Table 10-2 Predefined Services SERVICE AIM(TCP:5190) BGP(TCP:179) BOOTP_CLIENT(UDP:68) BOOTP_SERVER(UDP:67) CU-SEEME(TCP/UDP:7648, 24032) DNS(UDP/TCP:53) FINGER(TCP:79) FTP(TCP:20. 21) H. 323(TCP:1720) HTTP(TCP:80) HTTPS ICMP ICQ(UDP:4000) IKE(UDP:500) IPSEC_TUNNEL(ESP:0) IRC(TCP/UDP:6667) DESCRIPTION AOL's Internet Messenger service, used as a listening port by ICQ. A popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (e. g. Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail. Hyper Text Transfer Protocol - a client/server protocol for the world wide web. HTTPS is a secured http session often used in e-commerce. ICMP service allows normal ICMP packets to go through. This is a popular Internet chat program. The Internet Key Exchange algorithm is used for key distribution and management. [. . . ] 7-7 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26-1 Internet Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26-3 LAN Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26-2 WAN Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]