IPv4 Firewall Policy for Port Forwarding.

Hi,

I am trying to setting up a linux server in our DMZ behind Fortigate. I need to allow connection from Internet to Tcp port 2012 on our public IP address which will be forwarded or translated to linux server private IP TCP Port 22.

Here is what I configured. Just need to get some validation from you guys here.

Address Object:

    edit "Linux-TCP-2012"         set tcp-portrange 2012-2012     next

Virtual IP:

    edit "DMZ-Linux-P2012-VIP"

        set extip 2.2.2.2         set extintf "port19"         set portforward enable         set mappedip "172.16.24.11"         set extport 2012         set mappedport 22     next

Firewall Policy:

    edit 2         set srcintf "port19"         set dstintf "DMZ"         set srcaddr "all"         set dstaddr "DMZ-Linux-P2012-VIP"         set action accept         set schedule "always"         set service "Linux-TCP-2012"         set nat enable     next

The part I am not sure is: Do I use "SSH" for the Service parameter inside firewall policy OR use "Linux-TCP-2012" like I did OR simply use "ALL"?

Thanks,

/S