NETGEAR FVS318N

IPv4 Firewall Protection
113
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
The following table describes the fields that define the rules for inbound traffic and that are
common to most Inbound Service screens (see Figure 56 on page 119, Figure 59 on
page 122, and Figure 62 on page 125).
The steps to configure inbound rules are described in the following sections:
• Set LAN WAN Rules
• Create DMZ WAN Rules
• Create LAN DMZ Rules
Table 28. Inbound rules overview
Setting Description
Service The service or application to be covered by this rule. If the service or application does not
display in the list, you need to define it using the Services screen (see Add Customized
Services on page 136).
Action The action for outgoing connections covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise allow
• ALLOW always
• ALLOW by schedule, otherwise block
Note: Any inbound traffic that is not blocked by ru
les you create is allowed by the default
rule.
Select Schedule The time schedule (that is, Schedule1, Sched
ule2, or Schedule3) that is used by this
rule.
• This drop-down list is activated only when BLOCK by schedule, otherwise allow or
ALLOW by
schedule, otherwise block is selected as the action.
• Use the Schedule screen to configu
re the time schedules (see Set a Schedule to Block
or Allow Specific Traffic on page 146).
Send to LAN Server The LAN server address determines wh
ich computer on your network is hosting this
service rule. (You can also translate this address to a port number.) The options are:
• Si
ngle address. Enter the required address in the Start field to apply the rule to a
single device on your LAN.
• A
ddress range. Enter the required addresses in the Start and Finish fields to apply the
rule to a range of devices.
Send to DMZ Server The DMZ server address determines which computer on your network is hosting this
service rule. (You can also translate this address to a port number.)
Translate to Port
Number
If you want to assign the LAN server or DMZ server to a specific port, you can enable this
setting and specify a port number.
WAN Destination IP
Address
The setting that determines the destination IP address applicable to incoming traffic. This
is the public IP address that maps to the internal LAN server.
This can be either the address of the WAN interface or another public IP address.
You also have the option to enter an address range. Enter the required addresses in the
Start and Finish fields to apply the rule to a range of devices.