FirewallBuilder

The Service rule element matches packets based on the packet's IP service, as defined by protocol and port numbers. To match on a service, drag a service object from the object tree into the Service field. More information on service objects is available in (Section 5.3.

As in the Source and Destination rule elements, you can exclude, or "negate" a service by dragging its object to the Service field, then right-clicking and selecting Negate from the context menu.