A firewall service is a named set of protocols and ports, such as
ssh(tcp/22) ordns(udp/53 and tcp/53).
Rules refer to services instead of port numbers, which keeps them readable.
¶ The services list
Your Firewall › Firewall services lists more than a hundred predefined services (http, https, smtp, imaps, rdp, openvpn, ntp, snmp…) and the services you create.
A disabled service is ignored by the rules that use it.
¶ Create a service
Click New service, give it a name and its ports:
- Each port is written
protocol/port:tcp/8443,udp/1194. - A range is written with a colon:
tcp/5000:5200. - Several ports are separated by spaces:
tcp/80 tcp/443 udp/443. - For protocols without ports, use
icmp/any,gre/any,esp/any.
¶ Use services in a rule
- The Service field of a rule takes one service.
- The Firewall services tab of a rule adds as many services as needed: one rule can open http, https and ssh at once.
- Leave the service empty (or All) to match every protocol.
If a rule asks for a service from which no port can be derived, Artica does not apply the rule (without ports it would match all the traffic) and shows it as refused. Some predefined services of older versions were stored with internal variables instead of ports (
tomcat,webcache,icmp,sunrpc,ms_ds); they are converted automatically to their real ports.