Firewall objects

Firewall objects ease the creation of firewall rules. An object can be used in any number of rule.

Hosts

A host represent is a machine with an IP address. It can be local or remote. When rules are written to file, the host object will be translated in its own IP address.

Name
Name identifier for the host.
IP address
IP address of the host.
Description
Optional description.

Host groups

A host group is a group of machines with an IP address. Hosts in a group should be homogeneous. For example, a list of hosts with public addresses, or a group of machines inside the LAN.

Name
Name identifier for the host group.
Members
List of host object. Host objects must be created inside the Hosts tab before use inside a group.
Description
Optional description.

CIDR subnets

A set of hosts inside a network expressed in CIDR format.

Examples:

  • 10.0.0.0/24: 254 addresses, from 10.0.0.0 to 10.0.0.255
  • 192.168.1.8/29: 6 addresses, from 192.168.1.8 to 192.168.1.15
Name
Name identifier for the subnet.
Network
Network in CIDR notation.
Description
Optional description.

IP ranges

A list of hosts inside a network expressed in IP range format.

Examples:

  • 10.0.0.1-10.0.0.21: 21 hosts
  • 192.168.1.8-192.168.1.10: 2 hosts
Name
Name identifier for the range.
Start IP
First IP of the range.
End IP
Last IP of the range.
Description
Optional description.

Services

A service is the representation of a network software responding to a port with a specific protocol. For example, SSH and DNS are services:

  • SSH: protocol TCP, port 22
  • HTTP: protocol UDP, port 53
Name
Name identifier for the service.
Protocol
Select one of the available protocols.
Ports
An integer representing a port, or a list of integers separated by commas.
Description
Optional description.

Time conditions

A time condition can be associated to firewall rules to limit the time span where the rule is effective.

Name
Identifier of the time condition.
Description
Optional description.
Time start
Use HH:MM[:SS] format to specify when the time span begins.
Time stop
Use HH:MM[:SS] format to specify when the time span ends.
Days of the week
Limit the rule effectiveness to the selected day(s).

Zones

A zone is a group of host identified with a network address in CIDR format (Classless Inter-Domain Routing). For example, given the CIDR network 192.168.1.0/29, it represents all hosts from 192.168.1.2 to 192.168.1.6, where 192.168.1.1 is the gateway and 192.168.1.7 is the broadcast.

Name
Name identifier for the zone. Max 5 characters.
Network
A network in CIDR format.
Interface
The interface where the hosts are connected.
Description
Optional description.