Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 26 subscribers
  • Views 3964 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FW rules for XG itself?

Gary Parr

Is there any concept of rules that apply to XG itself? For instance, if I remove the ANY/ANY SMTP rule, is there anything that needs to be done to allow XG to send email using the built in SMTP server? Or is the XG basically run with a "deny all" policy that has holes poked in it as needed by other configuration settings?

Thanks,

Gary



This thread was automatically locked due to age.
Parents
  • +1

    Gary,

    internal XG rules are handled by ACL under Administration > Device Access.

    Regards

  • 0 in reply to lferrara

    Yeah I explored that after I posted and the more I looked into it and the exception rules, the more I realized this is basically a separate page for creating inbound FW rules where the target zone is the XG itself. I basically learned firewalls by using shorewall (netfilter) and so my default mode of thinking includes a zone for the FW itself. In my world, those ACL lists would actually just be rules in the firewall config screens. Oh well, I can see benefit in separating them into their own category. The one thing I see missing though is outbound rules for XG. I suppose that is not as necessary on XG as it would be using other FW solutions though.

    Anyway, thanks!

    -GP

Reply
  • 0 in reply to lferrara

    Yeah I explored that after I posted and the more I looked into it and the exception rules, the more I realized this is basically a separate page for creating inbound FW rules where the target zone is the XG itself. I basically learned firewalls by using shorewall (netfilter) and so my default mode of thinking includes a zone for the FW itself. In my world, those ACL lists would actually just be rules in the firewall config screens. Oh well, I can see benefit in separating them into their own category. The one thing I see missing though is outbound rules for XG. I suppose that is not as necessary on XG as it would be using other FW solutions though.

    Anyway, thanks!

    -GP

Children
No Data