Newsgroup: it.comp.reti.ip-admin
Titolo: opzioni firewall integrato zyxel

Buona serata a tutti
sto configurando il nuovo router zyxel 660,ma noto che a differenza
del 650 nella voce firewall ci sono 2voci in + lan to lan/ router e
wan to wan / router.
a cosa servono queste 2 nuove voci?
io prima avevo solo wan to lan  e viceversa, e ,fin li, ci ero
arrivato anchio.
Grazie


Se č come nei firewall, la regola lan to lan/router stabilisce regole o 
blocchi per i pacchetti dati  dai pc alla porta lan del router.
La seconda invece stabilisce regole o blocchi dall'esterno verso la wan del 
router
LAN to LAN / ZyWALL  forward
WAN to WAN / ZyWALL  block
Ciao
_____________________
mrcmobile 
www.mconsult.it
 

WAN to WAN / ZyWALL  block
ma non è la stessa cosa delle regole LAN TO WAN e WAN TO LAN ?
grazie


direi di no visto che in firewall più evoluti ci sono tutte queste:
LAN to LAN / ZyWALL   Block
LAN to WAN   BlockForward
LAN to DMZ   BlockForward
WAN to LAN   BlockForward
WAN to WAN / ZyWALL   Block
WAN to DMZ   BlockForward
DMZ to LAN   BlockForward
DMZ to WAN   BlockForward
DMZ to DMZ / ZyWALL   BlockForward
con LAN to LAN/Router permetti ai pc della lan di amministrare il router 
stesso e inoltre permetti la comunicazione tra i pc connessi alla porta 
LAN....
Dall'help del firewall:
Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to 
which they apply:
·        LAN to LAN/ZyWALL
 ·        WAN to LAN
 ·        DMZ to LAN
·        LAN to WAN
 ·        WAN to WAN/ZyWALL
 ·        DMZ to WAN
·    LAN to DMZ ·        WAN to DMZ
 ·        DMZ to DMZ/ZyWALL
The LAN includes both the LAN port and the WLAN.
By default, the ZyWALL's stateful packet inspection allows packets traveling 
in the following directions:
·        LAN to LAN/ZyWALL (This allows computers on the LAN to manage the 
ZyWALL and communicate between networks or subnets connected to the LAN 
interface.)
·       LAN to WAN
·       LAN to DMZ
·        WAN to DMZ
·       DMZ to WAN
The default rule for LAN to WAN traffic is that all users on the LAN are 
allowed non-restricted access to the WAN. When you configure a LAN to WAN 
rule, you in essence want to limit some or all users from accessing certain 
services on the WAN.
By default, the ZyWALL's stateful packet inspection blocks packets traveling 
in the following directions:
·       WAN to LAN
·        WAN to WAN/ZyWALL (This prevents computers on the WAN from using 
the ZyWALL as a gateway to communicate with other computers on the WAN 
and/or managing the ZyWALL.)
·       DMZ to LAN
·       DMZ to DMZ/ZyWALL (This prevents computers on the DMZ from 
communicating between networks or subnets connected to the DMZ interface 
and/or managing the ZyWALL.)
The default rule for WAN to LAN traffic blocks all incoming connections (WAN 
to LAN). If you wish to allow certain WAN users to have access to your LAN, 
you will need to create custom rules to allow it.
Connection Directions
LAN to LAN/ZyWALL, WAN to WAN/ZyWALL and DMZ to DMZ/ZyWALL rules apply to 
packets coming in on the associated interface (LAN, WAN, or DMZ 
respectively). LAN to LAN/ZyWALL means policies for LAN-to-ZyWALL (the 
policies for managing the ZyWALL through the LAN interface) and policies for 
LAN-to-LAN (the policies that control routing between two subnets on the 
LAN). Similarly, WAN to WAN/ZyWALL and DMZ to DMZ/ZyWALL polices apply in 
the same way to the WAN and DMZ ports.