Rule Base
Manage, reorder, and audit your firewall access control list. Rules are evaluated top-to-bottom by priority.
10 rules0 total hits
No policy conflicts detected. Click "Run Audit" to re-scan after making changes.
Top-to-Bottom Evaluation: Rules are matched in strict priority order. The first matching rule terminates evaluation. Drag rules to reorder. Lower priority number = evaluated first.
Rule Base(10 rules) ALLOW DENY REJECT Drag to reorder
#10
ALLOWAllow HTTP traffic from WAN to DMZ Web Server
TCP · any:any → 192.168.100.10:80 · WAN_TO_DMZ
0hits
#20
ALLOWAllow HTTPS traffic from WAN to DMZ Web Server
TCP · any:any → 192.168.100.10:443 · WAN_TO_DMZ
0hits
#30
ALLOWAllow SMTP traffic from WAN to DMZ Mail Server
TCP · any:any → 192.168.100.20:25 · WAN_TO_DMZ
0hits
#40
DENYBlock SSH access to DMZ from WAN (brute-force protection)
TCP · any:any → any:22 · WAN_TO_DMZ
0hits
#50
ALLOWAllow DMZ Web Server to query internal Database Server (MySQL)
TCP · 192.168.100.10:any → 10.0.0.5:3306 · DMZ_TO_LAN
0hits
#60
DENYBlock all unauthorized DMZ to LAN lateral movement
ANY · any:any → any:any · DMZ_TO_LAN
0hits
#70
DENYBlock direct WAN to Database — prevent external DB intrusion
TCP · any:any → any:3306 · WAN_TO_LAN
0hits
#80
REJECTReject SSH brute-force to internal LAN — send RST
TCP · any:any → any:22 · WAN_TO_LAN
0hits
#90
DENYBlock ICMP ping flood/reconnaissance from WAN
ICMP · any:any → any:any · WAN_TO_DMZ
0hits
#999
DENYIMPLICIT DEFAULT DENY — catch-all fallback rule
ANY · any:any → any:any · ANY
0hits