that matches the both of the following: 
 ●   Source IP & port 
 ●   Destination IP & port 
 With  the  value  of  Allow  for  the  Action  setting,  the  matching  traffic  passes  through 
 the  router  (to  be  routed  to  the  destination).  If  the  value  of  the  Action  setting  is  set 
 to  Deny  , the matching traffic does not pass through  the router (and is discarded). 
 This   setting   specifies   whether   or   not  to  log  matched  firewall  events.  The  logged 
 messages   are   shown   on  the  page  Status>Event  Log  .  A  sample  message  is  as 
 follows: 
 Aug 13 23:47:44 Denied CONN=Ethernet WAN SRC=20.3.2.1 
 DST=192.168.1.20 LEN=48 PROTO=TCP SPT=2260 DPT=80 
 ●   CONN:   The connection where the log entry refers to 
 ●   SRC:   Source IP address 
 ●   DST:   Destination IP address 
 ●   LEN:   Packet length 
 ●   PROTO:   Protocol 
 ●   SPT:   Source port 
 ●   DPT:   Destination port 
 Click  Save  to store your changes. To create an additional  firewall rule, click  Add Rule  and 
 repeat the above steps. 
 To change a rule’s priority, simply drag and drop the rule: 
 ●   Hold the left mouse button on the rule. 
 ●   Move it to the desired position. 
 ●   Drop it by releasing the mouse button. 
 To remove a rule, click the   button. 
 Rules  are  matched  from  top  to  bottom.  If  a  connection  matches  any  one  of  the  upper  rules,  the 
 matching   process   will   stop.   If   none   of   the   rules   match,   the   Default   rule   will   be   applied.   By 
 default, the  Default  rule is set as  Allow  for Outbound,  Inbound and Internal Network access.