Firewall Phases and Actions

[Index]
[Previous Chapter: Stateful Packet Inspection and Firewall Rules]
[Next Chapter: Using the Firewall Control Panel]

Chapter 4: Firewall Phases and Actions

Redirection Phase

Technically termed 'Destination Network Address Translation', or 'DNAT', the redirection phase is used if you wish change the destination of network traffic entering or leaving a zone.  The default behaviour of the firewall when there are no matching rules in this phase is to not perform any translation. 

      Screenshot

There are three types of action you can specify for a rule in the redirection phase:


Filtering Phase

The filtering phase is the most important phase, and must be populated with rules for the firewall to permit any traffic through it.  This phase is where you normally specify what network traffic should be permitted and what traffic should be discarded.  The default behaviour of the firewall when there are no matching filtering rules is to silently discard the traffic. 

      Screenshot

The filtering actions are:


Masquerading Phase

Technically termed 'Source Network Address Translation', or 'SNAT', the masquerading phase is used if you wish change the source address of network traffic entering or leaving a zone.  The default behaviour of the firewall when there are no matching rules in this phase is to not perform any translation. 

      Screenshot

There are three types of action you can specify for a rule in the redirection phase:

[Index]
[Previous Chapter: Stateful Packet Inspection and Firewall Rules]
[Next Chapter: Using the Firewall Control Panel]