Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[for(im stuck)]

I am taking original settings from the 200 and trying to port them over to the 210. I have run into a few issues that I have questions about.

First, on the 200 setup, you can click on the firewall tab and under policy you can choose LAN->WAN, LAN->DMZ etc etc. Then if you choose add new you have options that are Name, Action, Source, Destination, and Service.

I have no problems with the name and action part, but for Source and Destination there is now (on the 210) an interface Source and Destination, along with a Network Source and Destination. Which corresponds to LAN->WAN or LAN->DMZ etc and which does the other correspond to?

As an example, a row in my 200 WAN->LAN table says allow_standard_from_server, Allow, Any, Any, ping-inbound. How would this correspond in the 210 setup? Also, under service, on my 200 setup it says All Protocols, but that option doesn't seem to be available for the 210. How should I handle this?

Next, and I believe final (for now) question is on the what is the difference between the Rules section of the tree, and the Routing Rules section under Routing tables? And along with that, should the WAN->LAN settings in my paragraph above be put under Routing Rules, or just rules on the 210?

Thanks in advance and please let me know if I left anything out. I'm not a networking guy!
How would the

[danilovav]

First, you need to divide actions by every of directions. Usually, LAN->WAN is NAT, LAN->DMZ is Allow, WAN->DMZ (in case private addresses in DMZ) you should make 2 rules - SAT+Allow. In case of Allow/NAT you make source/destination alike with DFL-200 - for example, lan/lannet->wan/all-nets. In case of SAT+Allow, you make rules till core - wan/all-nets->core/wan_ip and specify new destination on SAT rule into tab SAT in field "new source".

By routuing rules you can change routing table for processing. Usually if can be used for multi-WANs or multi-gateways.

[for(im stuck)]

Thanks for the response. I guess I'm still a bit lost. Could you give me an example based on this screenshot, of what I would change to make the 210 equivalent of the 200 settings for allow_ping-outbound?

Thanks.

Let me know if the image shows or not.

[danilovav]

Should be NAT lan/lannet wan/all-nets ping-outbound
By default DFL has such rules in lan_to_wan folder

[for(im stuck)]

Thanks, I appreciate it! One last question, where the action before was Allow, why is it now NAT?

[danilovav]

Because DFL-200 has difference in directions - ex, LAN->WAN should be NAT, WAN->LAN - SAT+Allow. On DFL you can configure everying what you need without any help of device.