Adding & Removing Rules
This guide explains how to add and remove firewall rules using the NetFoundry zLAN Console, as shown in the screenshot below.
Firewall Rule Fields
Each rule consists of the following fields:
-
Type:
- Custom (requires Protocol selection)
- HTTP
- HTTPS
- LDAP
- RDP
- SSH
-
Protocol:
- Only shown for Custom type
- TCP or UDP
-
Direction:
- INBOUND (traffic coming into the firewall)
- OUTBOUND (traffic leaving the firewall)
-
Action:
- Allow (permit traffic)
- Deny (block traffic)
-
Source:
- IP address or CIDR range (e.g.,
192.168.1.0/24
)
- IP address or CIDR range (e.g.,
-
Destination:
- IP address or CIDR range (e.g.,
10.0.2.5
)
- IP address or CIDR range (e.g.,
-
Port Range:
- Specify a range (e.g.,
80-443
for HTTP/HTTPS) - For single ports, use the same value for low and high (e.g.,
22-22
for SSH)
- Specify a range (e.g.,
Adding a Rule
- Click Add Rule in the Console.
- Select the Type (e.g., HTTP, SSH, Custom).
- If you select Custom, choose the Protocol (TCP or UDP).
- Choose the Direction (INBOUND or OUTBOUND).
- Set the Action (Allow or Deny).
- Enter the Source IP/CIDR.
- Enter the Destination IP/CIDR.
- Specify the Port Range (low-high).
- Click Save to apply the rule. Note: Changes do not take effect until you hit the Save button.
Removing a Rule
- Locate the rule you want to remove in the rules list.
- Click the Delete (trash) icon next to the rule.
- Confirm the deletion when prompted.
- Click Save to apply the change. Note: Removing a rule does not take effect until you hit the Save button.
Example Rules
-
Allow inbound HTTP from any source to 10.0.2.5 on port 80:
- Type: HTTP
- Direction: INBOUND
- Action: Allow
- Source: 0.0.0.0/0
- Destination: 10.0.2.5
- Port Range: 80-80
-
Deny outbound SSH from 192.168.1.100 to any destination:
- Type: SSH
- Direction: OUTBOUND
- Action: Deny
- Source: 192.168.1.100
- Destination: 0.0.0.0/0
- Port Range: 22-22
-
Allow inbound Custom TCP from any source to 10.0.2.5 on port range 1000-2000:
- Type: Custom
- Protocol: TCP
- Direction: INBOUND
- Action: Allow
- Source: 0.0.0.0/0
- Destination: 10.0.2.5
- Port Range: 1000-2000