The firewalls in this tool implement a default deny
rule even when you haven't written rules yet. This
means that when you write your firewall rules you are
whitelisting connections on your firewall. Whitelisting
is when you define a list of things that are allowed to
pass through your firewall. If a connection doesn't meet
the criteria of one of the rules, it is denied by default.
This is a common security practice and is done because
blacklisting is a poor security practice due to the
impossibility of predicting all attacks and threats
for which you would need to define rules to properly
secure your network. The rules in the "Active Rules"
list are evaluated in order from top to bottom and as
previously stated if none are matched then the firewall
will default deny that packet. The "Stateful Packet
Inspection" checkbox is an attribute of the entire firewall.
This means that it is either on or off for the entire
firwall as opposed to a specific rule and is useful for
preventing Ack Scans.
To create a new rule for your firewall simple choose the
options menu on the main screen, then choose the define rules
option for whichever firewall you'd like. Note: The second firewall
will be greyed out unless you have chosen the seperated subnet
network layout. You should now be viewing the firewall rules
dialog box. To create a new rule simply enter all the information
for your new rule in the boxes along the left hand side. Start
by naming your rule. After you have a name entered choose the
source of the packets that you want to allow with this rule.
For example if we were wanting to create a rule allowing all
traffic from the internet to communicate with our DNS server,
we would choose "Any" as our source IP in the drop down box.
This will automatically fill in the IP address field with
stars as well as the port field. Now you need to choose a
destination IP and port for this rule. Following the same
scenario as above we would choose DNS from the drop down menu.
This will again automatically fill in the appropriate IP
address and port. We now need to choose a protocol which in
this case we can set to Any so that we ensure all traffic
from the internet coming to our DNS server is allowed. Now
simply click the "Save Rule" button. The new rule will now
be listed under the "Active Rules" list in the same window.
You can easily edit rules that already exist in either of the
lists be it the Active Rules or Inactive rules. Simply clicking
on the existing rule once will highlight that rule and populate
all the rule data boxes on the left hand side of the window
with that rules current information. Simply changing one of
the values in the boxes and then clicking save will allow you
to change that rules values. You will be prompted with a window
that ensures you are sure you want to save over this rules
current information, clicking yes will save the new information
for that rule. To delete a rule completely simply choose the
rule and click the delete button. You will then be prompted
to ensure you are sure you want to delete that rule. Clicking
yes will permanently delete that rule. The clear button is used
to quickly clear all rule fields on the left so that you can
easily fill them back in for creating a new rule if so desired.
Since the rules lists are evaluated in order, you can edit
the order of the rules in each list. Select a rule you
would like to move by single clicking it, and then click
the up or down button between the two lists. You can
repetedly click the up or down arrow until the rule
is in the desired location. To activate a rule ensure it
is in the "Active Rules" list. If it is in the "Inactive
Rules" list or vice versa simply select the rule you'd like
to move by single clicking and click the "<" or ">" button.
This will move the selected rule in the direction of the arrow.
If you would like to move an entire list one direction or the
other simply click the appropriate multi-arrowed button. For
instance if you wanted to move all active rules to the
"Inactive Rules" list simply click the ">>>" button. The same
can be done to move all inactive rules to the "Active Rules"
list, simply click the "<<<" button.
COPYRIGHT