Attach the firewall policy to the WAN interface in the inbound direction.įirewall/NAT > Firewall Policies > WAN_IN > Actions > Interfaces Interface: eth0Ĥ. Add two firewall rules to the newly created firewall policy.įirewall/NAT > Firewall Policies > WAN_IN > Actions > Edit Ruleset > + Add New Rule Description: Allow established/relatedįirewall/NAT > Firewall Policies > WAN_IN > Actions > Edit Ruleset > + Add New Rule Description: Drop invalid stateģ. Add a WAN_IN firewall policy and set the default action to drop.įirewall/NAT > Firewall Policies > + Add Ruleset Name: WAN_INĢ.

WAN_LOCAL Matches on established/related and invalid traffic that is destined for the router itself ( WAN to LOCAL).įollow the steps below to manually create the firewall policies from the Basic Setup wizard:Ģ.

WAN_IN Matches on established/related and invalid traffic that is passed through the router ( WAN to LAN).

The Basic Setup wizard in EdgeOS adds the following firewall rules to the router: For example, the router can block all traffic from WAN to LAN, unless it is return traffic associated with a already existing connection. Using these firewall states, the router can accept/drop traffic in different directions depending on the state of the connection.

invalid The incoming packets do not match any of the other states.

related The incoming packets are new, but associated with an already existing connection.established The incoming packets are associated with an already existing connection.new The incoming packets are from a new connection.The EdgeRouter uses a stateful firewall, which means the router firewall rules can match on different connection states.

The latest EdgeOS firmware can be downloaded from the EdgeRouter Downloads page.įirewall policies are used to allow traffic in one direction and block it in another.The rules that are manually created using this article can also be automatically created by running the Basic Setup wizard.Applicable to the latest EdgeOS firmware on all EdgeRouter models.

Firewall router