Configuring Packet and Service Filtering
PR2000 Installation Guide
53
•
Protocol. This allows you to set filtering by protocol (TCP, UDP,
ICMP). Select Other to specify a different protocol by number or
None if this rule doesn’t depend on the protocol.
•
Source IP Operator. Allows filtering by source IP address. The
source addresses to be filtered are specified by an operator (Equal,
Less than, Greater than, etc – use “?” to review the options) and an
IP address. Select “None” (9) if the source IP address is irrelevant
for this rule.
•
Destination IP Operator. Similar to source IP address, it defines
filtering based on the destination IP address of a packet.
•
Source Port Operator. To set filtering for the application based on
the source port (each TCP or UDP application uses a different port
number; for example, Telnet uses port 23) using an operator similar
to those used for IP addresses. When specifying a port, you can
type '?' to get a listing of common applications associated to each
port number (or to specify another protocol).
•
Destination Port Operator. Similar to source port, it defines
filtering based on the destination port.
•
Allow TCP Connection. Type 'Y' to filter TCP connection request
packets (packets with ACK bit set). This will prevent the completion
of all TCP connections. Type 'N' if you want to allow TCP
connections (or if this is irrelevant to the rule).
•
Set Accounting Process. Type ‘Y’ to enable the account process
for this rule. When this option is enabled, all packets that match this
rule are logged. To see the account process logs, use the “Info ->
Show Account Table” command. This option enables the
summary log; detailed logs are enabled when the Rule List is
attributed to the interface.
•
For IPX, the parameters are:
•
Filter status. Select Enable to activate the rule in the filter or
Disable if you want to create a rule but not use it for now.
•
Scope. Permit causes packets that comply with this rule to be
accepted and Deny causes the packets to be discarded.
•
SRC Network Number and SRC Network Mask. Let you specify
the packet by source network number and network mask.
•
DST Network Number and DST Network Mask. Let you specify
the packet by destination network number and network mask.
•
Protocol id to filter. This allows you to set filtering by protocol
(RIP, SAP, SPX, NetBIOS). Select Other to specify a different
protocol by number or None if this rule doesn’t depend on the
protocol.
