Let me pose an example and see if I understand the basics of the expert rules. I have a router/firewall that broadcasts to syslog on UDP 514; I have created a rule calledSYSLOG that allows my PC IP of 168.202.22.3 to communicate with 168.202.22.4 (default gateway). I have also created a second rule called BLOCK that blocks any source and any destination for UDP 514. Am I correctly interpreting the rules ? Everything seems to be working fine.

TIA

Operating System:Windows XP Pro
Product Name:ZoneAlarm Pro
Software Version:4.0