Netgate 8300 - Page 71

Security Gateway Manual Netgate-8300
If clients are configured to query DNS servers other than this firewall, create rules using those as
the destination instead.
Destination Port Range
Select the DNS (53) entry or choose Other and manually enter 53
To allow DNS over TLS, create a separate rule using the DNS over TLS entry or manually enter
port 853.
Description
Text describing the rule, e.g. Allow clients to resolve DNS through the firewall
• Click Save
Allow ICMP to the Firewall
Add a rule to allow ICMP traffic from local devices to the firewall.
• Click to add a new rule at the bottom of the list.
• Configure the rule as follows:
Action
Pass
Interface
OPTx (or the custom name)
Protocol
ICMP
ICMP Subtype
Any
Tip: While ICMP is useful, some network administrators prefer to limit the allowed ICMP types
to Echo Request only. This allows devices to use ICMP ping for diagnostic purposes, but no other
types of ICMP traffic.
Source
OPTx subnets (or the custom name)
Destination
This Firewall (self)
Description
Allow client ICMP to the firewall
• Click Save
© Copyright 2024 Rubicon Communications LLC 69