Firewall-Regeln (EN)
ConceptFilter rules for controlling data traffic between network interfaces
Definition
Firewall rules are filter rules that allow or block data traffic between network interfaces based on source and destination IP, port, protocol, and other criteria. They are typically evaluated from top to bottom, making the arrangement of rules crucial for functionality. By defining precise rules, network segments can be securely separated from each other and unwanted traffic can be blocked.
Architecture
flowchart TD A[Internet] -->|Connection| B(Firewall) B --> C{Rule 1: Allow HTTP} B --> D{Rule 2: Block FTP} B --> E{Rule 3: Allow SSH} C -->|Port 80| F[Web Server] D -->|Blocked| G[FTP Server] E -->|Port 22| H[Admin Server] In Context
- Typically used together with Stateful Inspection
- Related to: Packet Filtering, Application Layer Gateway, Network Address Translation
- Example use: DMZ configuration between internal network and internet