Adding comments in the packet rules

For example, you might want to record what a particular rule permits or denies. This type of information can save you hours of time in the future. If you ever need to fix a security problem, you might need these comments to explain how the rules work. You might not have the time to figure out what your rules mean at a later time, so use comments generously.

Each of the dialogs associated with creating and activating packet rules has a Description field. This is the field that is reserved for your comments. The system ignores anything you put in this field. You might want to use the comment field at each step of the rule creation process. This can reduce your chance of forgetting to make a significant comment. It is best to make your comments while the process on which you are commenting is still fresh in your mind. However, you can wait until you finish creating all your rules.

For instructions on how to make comments in a rules file, use the Packet Rules Editor online help.