Firewall objects
Firewall objects ease the creation of firewall rules.
An object can be used in any number of rule.
Hosts
A host represent is a machine with an IP address.
It can be local or remote.
When rules are written to file,
the host object will be translated in its own IP address.
- Name
- Name identifier for the host.
- IP address
- IP address of the host.
- Description
- Optional description.
Host groups
A host group is a group of machines with an IP address.
Hosts in a group should be homogeneous.
For example, a list of hosts with public addresses, or
a group of machines inside the LAN.
- Name
- Name identifier for the host group.
- Members
- List of host object. Host objects must be created
inside the Hosts tab before use inside a group.
- Description
- Optional description.
CIDR subnets
A set of hosts inside a network expressed in CIDR format.
Examples:
- 10.0.0.0/24: 254 addresses, from 10.0.0.0 to 10.0.0.255
- 192.168.1.8/29: 6 addresses, from 192.168.1.8 to 192.168.1.15
- Name
- Name identifier for the subnet.
- Network
- Network in CIDR notation.
- Description
- Optional description.
IP ranges
A list of hosts inside a network expressed in IP range format.
Examples:
- 10.0.0.1-10.0.0.21: 21 hosts
- 192.168.1.8-192.168.1.10: 2 hosts
- Name
- Name identifier for the range.
- Start IP
- First IP of the range.
- End IP
- Last IP of the range.
- Description
- Optional description.
Services
A service is the representation of a network software responding
to a port with a specific protocol.
For example, SSH and DNS are services:
- SSH: protocol TCP, port 22
- HTTP: protocol UDP, port 53
- Name
- Name identifier for the service.
- Protocol
- Select one of the available protocols.
- Ports
- An integer representing a port, or a list of integers separated by commas.
- Description
- Optional description.
Time conditions
A time condition can be associated to firewall rules to limit the time span where
the rule is effective.
- Name
- Identifier of the time condition.
- Description
- Optional description.
- Time start
- Use HH:MM[:SS] format to specify when the time span begins.
- Time stop
- Use HH:MM[:SS] format to specify when the time span ends.
- Days of the week
- Limit the rule effectiveness to the selected day(s).
Zones
A zone is a group of host identified with a network address in CIDR format (Classless Inter-Domain Routing).
For example, given the CIDR network 192.168.1.0/29, it represents all hosts
from 192.168.1.2 to 192.168.1.6, where 192.168.1.1 is the gateway and 192.168.1.7 is the broadcast.
- Name
- Name identifier for the zone. Max 5 characters.
- Network
- A network in CIDR format.
- Interface
- The interface where the hosts are connected.
- Description
- Optional description.