D-Link DFL-2500 User Guide - Page 136

14.3. Scenarios: IP Rules Configuration 117 2. Create Rule Final step is to create the rule that will allow ICMP(Ping) packets to be received by the external interface of the firewall. Rules → IP Rules → Add → IP Rule: Name: Ping to Ext Action: Allow Service: ping-inbound Source Interface: any Source Network: all-nets Destination Interface: core Destination Network: ip ext Then click OK Example: NAT rule In this case, we set up a NAT rule in the firewall that will allow us to browse the Internet from private IP addresses behind the firewall. The private IP addresses will be translated to the external IP address of the firewall. 1. Add a "HTTP" service object that use TCP port 80. 2. Add a "DNS" service object that use TCP/UDP port 53 to enable name resolving service. 3. Create two rules that NAT the services above from the internal interface on the internal network to any destination interface on any network. WebUI : 1. Create HTTP Service If no http service is defined, we need to create a new service. Objects → Services → Add → TCP/UDP Service: Name: http Type: TCP Source: 0-65535 Destination: 80 Then click OK D-Link Firewalls User's Guide