Owner's manual

128
Establishing an Internet Connection
Internet security and the firewall
5.375 x 8.375 ver 2.1
sorted separately, so there is a separate hyperlink for each of
the rule categories.
The firewall rule order can only be changed for user-defined
rules. Sort order may be important depending on the nature
of the rules that are defined. Firewall rules are processed in a
top-down sequence. This means that when the Magnia SG30
receives a packet, it will start at the top of the list of firewall
rules and process them one at a time until a match is made for
the packet. As soon as a match is made it will process the
packet based on that rule. Therefore, if a packet potentially
matches two different iptables rules, then the first rule
matched will be executed for the packet.
Custom firewall rules are initially process in the order
entered. The current processing order can be seen on the
advanced firewall page, which lists all custom and optional
firewall rules.
To change the order for either the I/O Rules or the Port
Forwarding Rules, click the Change Order hyperlink on this
page. The resulting screen will list the rules that can be
sorted.
All custom rules are listed on this screen. To select a rule to
move in the sequence, click on it to highlight it. Then, move it
up and down the list of rules using the Move Up and Move
Down buttons. When the order of rule execution is correct,
click Apply to save your changes.