The first tab on the main Rules page is Floating, as shown, from which you can create floating firewall rules. These rules are different from other rules in three significant ways:
- They can be applied in either direction, or both directions (in other words, to traffic either leaving or entering an interface).
- They can apply to more than one interface.
- In addition to the Pass, Block and Reject options for Action, there is a fourth option called Match. If Match is selected, the rule will be invoked if the traffic matches the criteria specified by the rule, but the pass/block status of the traffic will not be affected. This option will be used in Chapter 6, Traffic Shaping, as it provides a means of diverting traffic into different ...
