#-----------------------------------------------------------------------------#
#    This file contains sample Allow rules.                                   #
#                                                                             #
#    To activate the rules, simply move them to firerule.cnf and update the   #
#    attributes to match your setup.                                          #
#                                                                             #
#    DISCLAIMER: Not all samples have been tested by F/X Communications.      #
#-----------------------------------------------------------------------------#


#-----------------------------------------------------------------------------#
#   Allow transparent access to real IP on internal network/Firewall PC.      #
#                                                                             #
#   The rules below demonstrate how an internal PC with an external IP        #
#   address can be allowed transparent Internet access. Similar rules should  #
#   be used when the firewall PC has more than one external IP address or     #
#   when internal PC's are equipped with an external IP address.              #
#                                                                             #
#   Do NOT use this approach with INTERNAL IP addresses that rely on NAT.     #
#                                                                             #
#-----------------------------------------------------------------------------#

Allow-Public-IP   Comment = "Access to server behind the firewall (DMZ)",
                  Destination = "public-ip-address.com",
                  Rule-Action = Allow,
                  Direction = Bidirectional


#-----------------------------------------------------------------------------#
#                                                                             #
#   Punching a hole in the Firewall for a certain port.                       #
#                                                                             #
#   The rules below demonstrate how A PROTECTED FIREWALL PC can Allow         #
#   traffic to and from a certain port (the http port in this case).          #
#                                                                             #
#-----------------------------------------------------------------------------#

Allow-Web         Comment = "Open port on protected Firewall PC",
                  Protocol = TCP,
                  Destination-Port = "http",
                  Destination = "My_IP",
                  Rule-Action = Allow,
                  Direction = Bidirectional


#-----------------------------------------------------------------------------#
#                                                                             #
#   Allowing DHCP leases through an otherwise secured Firewall.               #
#                                                                             #
#-----------------------------------------------------------------------------#

Allow-DHCP-Lease  Comment = "Allow DHCP through Firewall (UDP port 68)",
                  Protocol = UDP,
                  Destination-Port = "68",
                  Rule-Action = Allow,
                  Direction = Incoming,
