1,365
edits
Changes
mLine 11:
Line 11: − <table class="nd-mantable">+ − <tr>+ − <th>field name</th>+ − <th>value</th>+ − <th>description</th>+ − </tr>+ − <tr>+ − <td>Drop invalid packets</td>+ − <td>yes {{!}} no; Default: '''no'''</td>+ − <td>A “Drop” action is performed on a packet that is determined to be invalid</td>+ − </tr>+ − <tr>+ − <td>Input</td>+ − <td>Reject {{!}} Drop {{!}} Accept; Default: '''Accept'''</td>+ − <td>Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Input chain</td>+ − </tr>+ − <tr>+ − <td>Output</td>+ − <td>Reject {{!}} Drop {{!}} Accept; Default: '''Accept'''</td>+ − <td>Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Output chain</td>+ − </tr>+ − <tr>+ − <td>Forward</td>+ − <td>Reject {{!}} Drop {{!}} Accept; Default: '''Reject'''</td> − <td>Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Forward chain</td> − </tr> − </table> Line 54:
Line 50: − <table class="nd-mantable">+ − <tr>+ − <th>field name</th>+ − <th>value</th>+ − <th>description</th>+ − </tr>+ − <tr>+ − <td>Source zone</td>+ − <td>yes {{!}} no; Default: '''no'''</td>+ − <td>Toggles DMZ On or Off</td>+ − </tr>+ − <tr>+ − <td>DMZ host IP address</td>+ − <td>ip; Default: " "</td>+ − <td>Internal host to which the DMZ rule will be applied </td>+ − </tr> − </table> Line 80:
Line 74: − <table class="nd-mantable">+ − <tr>+ − <th>field name</th>+ − <th>value</th>+ − <th>description</th>+ − </tr>+ − <tr>+ − <td>Source zone</td>+ − <td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span></td>+ − <td>The source zone from which data packets will redirected from</td>+ − </tr>+ − <tr>+ − <td>Destination zones</td>+ − <td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span></td>+ − <td>The destination zone to which data packets will be redirected to</td>+ − </tr>+ − <tr>+ − <td>Default forwarding action</td>+ − <td>Reject {{!}} Drop {{!}} Accept</td>+ − <td>Action to be performed with the redirected packets </td> − </tr> − </table> Line 116:
Line 107: − <table class="nd-mantable">+ − <tr>+ − <th>field name</th>+ − <th>value</th>+ − <th>description</th>+ − </tr>+ − <tr>+ − <td>Name</td>+ − <td>string; Default: " "</td>+ − <td>Name of the rule, used purely for easier management purposes</td>+ − </tr>+ − <tr>+ − <td>Protocol</td>+ − <td>TCP+UDP {{!}} TCP {{!}} UDP {{!}} ICMP {{!}} -- custom --; Default: '''TCP+UDP'''</td>+ − <td>Type of protocol of incoming packet</td>+ − </tr>+ − <tr>+ − <td>External port</td>+ − <td>integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "</td>+ − <td>Traffic will be forwarded from this port on the WAN network</td>+ − </tr>+ − <tr>+ − <td>Internal IP address</td>+ − <td>ip; Default: " "</td>+ − <td>The IP address of the internal machine that hosts some service that you want to access from the outside</td>+ − </tr>+ − <tr>+ − <td>Internal port</td> − <td>integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "</td> − <td>The rule will redirect the traffic to this port on the internal machine</td> − </tr> − </table> Line 159:
Line 145: − <table class="nd-mantable">+ − <tr>+ − <th>field name</th>+ − <th>value</th>+ − <th>description</th>+ − </tr>+ − <tr>+ − <td>Enable</td>+ − <td>yes {{!}} no; Default: '''no'''</td>+ − <td>Toggles a rule ON or OFF</td>+ − </tr>+ − <tr>+ − <td>Name</td>+ − <td>string; Default: " "</td>+ − <td>The name of the rule. This is used for easier management purposes </td>+ − </tr>+ − <tr>+ − <td>Protocol</td>+ − <td>TCP+UDP {{!}} TCP {{!}} UDP {{!}} ICMP {{!}} -- custom --; Default: '''TCP+UDP'''</td>+ − <td>Specifies to which protocols the rule should apply </td>+ − </tr>+ − <tr>+ − <td>Source zone</td>+ − <td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span> ; Default: '''<span style="background:#DDDDDD"> wan: ppp </span>'''</td>+ − <td>The source zone from which data packets will redirected from</td>+ − </tr>+ − <tr>+ − <td>Source MAC address</td>+ − <td>mac; Default: " "</td>+ − <td>Matches incoming traffic from these MACs only</td>+ − </tr>+ − <tr>+ − <td>Source IP address</td>+ − <td>ip; Default: " "</td>+ − <td>Matches incoming traffic from this IP or range of IPs only</td>+ − </tr>+ − <tr>+ − <td>Source port</td>+ − <td>integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "</td>+ − <td>Matches incoming traffic originating from the given source port or port range on the client host only</td>+ − </tr>+ − <tr>+ − <td>External IP address</td>+ − <td>ip; Default: " "</td>+ − <td>Matches incoming traffic directed at the given IP address only</td>+ − </tr>+ − <tr>+ − <td>External port</td>+ − <td>integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "</td>+ − <td>Specifies the external port, i.e., the port from which the third party is connecting </td>+ − </tr>+ − <tr>+ − <td>Internal zone</td>+ − <td><span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span> ; Default: '''<span style="background:#DDDDDD"> lan: lan </span>'''</td>+ − <td>Specifies the internal zone, i.e., the zone where the incoming connection will be redirected to</td>+ − </tr>+ − <tr>+ − <td>Internal IP address</td>+ − <td>ip; Default: " "</td>+ − <td>Specifies the internal IP address, i.e., the IP address to which the incoming connection will be redirected to</td>+ − </tr>+ − <tr>+ − <td>Internal port</td>+ − <td>integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "</td> − <td>Specifies the internal port, i.e., the port to which the incoming connection will be redirected to</td> − </tr> − <tr> − <td>Enable NAT loopback</td> − <td>yes {{!}} no; Default: '''no'''</td> − <td>NAT loopback enables your local network (i.e., behind your router/modem) to connect to a forward-facing IP address (such as 208.112.93.73) of a machine that it also on your local network </td> − </tr> − <tr> − <td>Extra arguments</td> − <td>string; Default: " "</td> − <td>Passes additional arguments to iptables. '''Use with care!'''</td> − </tr> − </table> Line 245:
Line 217: − <table class="nd-othertables">+ − <tr>+ − <th style="width: 250px">FIELD NAME</th>+ − <th style="width: 1450px">DESCRIPTION</th>+ − </tr>+ − <tr>+ − <td>Name</td>+ − <td>Name of the rule, used purely for easier management purposes</td>+ − </tr>+ − <tr>+ − <td>Protocol</td>+ − <td>Type of protocol of incoming packet</td>+ − </tr>+ − <tr>+ − <td>Source</td>+ − <td>The source zone from which data packets will redirected from</td>+ − </tr>+ − <tr>+ − <td>Destination</td>+ − <td>Redirect matched traffic to the given IP address and destination port</td>+ − </tr>+ − <tr>+ − <td>Action</td>+ − <td>Action to be performed with the packet if it matches the rule</td>+ − </tr>+ − <tr>+ − <td>Enable</td>+ − <td>Toggles the rule ON or OFF. If unchecked, the rule will not be deleted, but it also will not be loaded into the firewall</td>+ − </tr>+ − <tr>+ − <td>Sort</td>+ − <td>When a packet arrives, it gets checked for a matching rule. If there are several matching rules, only the first one is applied, i.e., the order of the rule list impacts how your firewall operates, therefore you are given the ability to sort your list however you deem fit</td> − </tr> − </table>
Reverted edits by Audronė (talk) to last revision by Dziugas
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | VALUE
! style="width: 579px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Drop invalid packets
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | yes {{!}} no; Default: '''no'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | A “Drop” action is performed on a packet that is determined to be invalid
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Input
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Reject {{!}} Drop {{!}} Accept; Default: '''Accept'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Input chain
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Output
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Reject {{!}} Drop {{!}} Accept; Default: '''Accept'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Output chain
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Forward
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Reject {{!}} Drop {{!}} Accept; Default: '''Reject'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action<span style="color: #0054A6;">'''*'''</span> that is to be performed for packets that pass through the Forward chain
|-
|}
'''*When a packet goes through a firewall chain it is matched against all the rules of that specific chain. If no rule matches said packet, an according Action (Drop, Reject or Accept) is performed'''
'''*When a packet goes through a firewall chain it is matched against all the rules of that specific chain. If no rule matches said packet, an according Action (Drop, Reject or Accept) is performed'''
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | VALUE
! style="width: 579px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source zone
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | yes {{!}} no; Default: '''no'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Toggles DMZ On or Off
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | DMZ host IP address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | ip; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal host to which the DMZ rule will be applied
|-
|}
===Zone Forwarding===
===Zone Forwarding===
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | VALUE
! style="width: 579px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source zone
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | <span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span>
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The source zone from which data packets will redirected from
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Destination zones
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | <span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span>
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The destination zone to which data packets will be redirected to
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Default forwarding action
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Reject {{!}} Drop {{!}} Accept
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action to be performed with the redirected packets
|-
|}
==Port Forwarding==
==Port Forwarding==
[[Image:Network firewall port forwarding new.PNG]]
[[Image:Network firewall port forwarding new.PNG]]
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | VALUE
! style="width: 579px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Name
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | string; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Name of the rule, used purely for easier management purposes
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Protocol
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | TCP+UDP {{!}} TCP {{!}} UDP {{!}} ICMP {{!}} -- custom --; Default: '''TCP+UDP'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Type of protocol of incoming packet
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | External port
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Traffic will be forwarded from this port on the WAN network
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal IP address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | ip; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The IP address of the internal machine that hosts some service that you want to access from the outside
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal port
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The rule will redirect the traffic to this port on the internal machine
|-
|}
Once you have submitted the required information, click the '''Add''' button located in the New Port Forward Rule tab.
Once you have submitted the required information, click the '''Add''' button located in the New Port Forward Rule tab.
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | VALUE
! style="width: 579px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Enable
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | yes {{!}} no; Default: '''no'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Toggles a rule ON or OFF
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Name
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | string; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The name of the rule. This is used for easier management purposes
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Protocol
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | TCP+UDP {{!}} TCP {{!}} UDP {{!}} ICMP {{!}} -- custom --; Default: '''TCP+UDP'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Specifies to which protocols the rule should apply
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source zone
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | <span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span> ; Default: '''<span style="background:#DDDDDD"> wan: ppp </span>'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The source zone from which data packets will redirected from
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source MAC address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | mac; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Matches incoming traffic from these MACs only
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source IP address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | ip; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Matches incoming traffic from this IP or range of IPs only
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source port
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Matches incoming traffic originating from the given source port or port range on the client host only
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | External IP address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | ip; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Matches incoming traffic directed at the given IP address only
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | External port
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Specifies the external port, i.e., the port from which the third party is connecting
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal zone
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | <span style="background:#9DB6BA"> gre: gre tunnel </span> | <span style="background:#FD9589"> hotspot: </span> {{!}} <span style="background:#CEF58F"> l2tp: l2tp </span> {{!}} <span style="background:#9BEAC3"> pptp: pptp </span> {{!}} <span style="background:#96EBE8"> vpn: openvpn </span> {{!}} <span style="background:#D0E1EF"> wan: ppp </span> {{!}} <span style="background:#DDDDDD"> lan: lan </span> ; Default: '''<span style="background:#DDDDDD"> lan: lan </span>'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Specifies the internal zone, i.e., the zone where the incoming connection will be redirected to
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal IP address
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | ip; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Specifies the internal IP address, i.e., the IP address to which the incoming connection will be redirected to
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Internal port
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | integer [0..65535] {{!}} range of integers [0..65534] - [1..65535]; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Specifies the internal port, i.e., the port to which the incoming connection will be redirected to
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Enable NAT loopback
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | yes {{!}} no; Default: '''no'''
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | NAT loopback enables your local network (i.e., behind your router/modem) to connect to a forward-facing IP address (such as 208.112.93.73) of a machine that it also on your local network
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Extra arguments
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | string; Default: " "
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Passes additional arguments to iptables. '''Use with care!'''
|-
|}
==Traffic Rules==
==Traffic Rules==
{| class="wikitable"
|+
! style="width: 250px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | FIELD NAME
! style="width: 1450px; border: 1px solid white; border-bottom: 2px solid #0054A6; background: white; color: #0054A6; text-align: left;" | DESCRIPTION
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Name
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Name of the rule, used purely for easier management purposes
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Protocol
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Type of protocol of incoming packet
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Source
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | The source zone from which data packets will redirected from
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Destination
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Redirect matched traffic to the given IP address and destination port
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Action to be performed with the packet if it matches the rule
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Enable
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Toggles the rule ON or OFF. If unchecked, the rule will not be deleted, but it also will not be loaded into the firewall
|-
! style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | Sort
| style="border: 1px solid white; border-bottom: 2px solid #E8E8E8; text-align: left; vertical-align: top; background: white;" | When a packet arrives, it gets checked for a matching rule. If there are several matching rules, only the first one is applied, i.e., the order of the rule list impacts how your firewall operates, therefore you are given the ability to sort your list however you deem fit
|-
|}
===Traffic Rule Configuration===
----
To customize a Traffic Rule, click the '''Edit''' button located next to it. This way you can fine tune a rule to near perfection, if you should desire that. The figure below is an example of the "Allow-DHCP-Relay" default rule editing. All rules are configured in an identical manner but with different settings.
