name WAN_IN {
default-action drop
description "packets from internet to intranet"
rule 2000 {
action accept
description ICMP
icmp {
type-name echo-request
}
protocol icmp
}
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}
rule 3003 {
action accept
description "PortForward [Carel HTTP]"
destination {
address
192.168.1.211 port 80
}
protocol tcp
}
rule 3004 {
action accept
description "PortForward [Carel HTTPS]"
destination {
address
192.168.1.211 port 443
}
protocol tcp
}
rule 3005 {
action accept
description "PortForward [Carel FTP]"
destination {
address
192.168.1.211 port 21
}
protocol tcp
}
}
name WAN_LOCAL {
default-action drop
description "packets from internet to gateway"
rule 3001 {
action accept
description "allow established/related sessions"
state {
established enable
invalid disable
new disable
related enable
}
}
rule 3002 {
action drop
description "drop invalid state"
state {
established disable
invalid enable
new disable
related disable
}
}