{{indexmenu_n>20}}

# Default Firewall Rules

A number of sample firewall rules are enabled by default, providing a basic set of filtering for the network.

^ Rule ^ Purpose ^
| Allow-Ping | Permit ping from WAN to device. |
| Allow-DHCP-Renew | Permit traffic from WAN to any zone. |
| Allow-IGMP | Permit [IGMP](/glossary/i/igmp) traffic from WAN to IPv4 devices. |
| Allow-DHCPv6 | Permit IPV6 traffic from WAN to IPV6 device. |
| Allow-MLD | Permit MLD traffic over [ICMP](/glossary/i/icmp) from WAN to IPV6 devices. |
| Allow-ICMPv6-Input | Permit [ICMP](/glossary/i/icmp) traffic from WAN to IPV6 devices. |
| Allow-ICMPv6-Forward | Permit [ICMP](/glossary/i/icmp) traffic from WAN to any zone. |
| Allow-IPsec/ESP | Permit [IPsec](/glossary/i/ipsec) over [ESP](/glossary/e/esp) traffic from WAN to LAN. |
| Allow-ISAKMP-Passthrough | Permit [ISAKMP](/glossary/i/isakmp) over [UDP](/glossary/u/udp) traffic from WAN to LAN. |