Cyclades AlterPath OnBoard, Administrator'S Manual

Page: 102 / 460

Understanding Firewall/Packet Filtering on the OnBoard
66 AlterPath OnBoard Administrator’s Guide
Any of the options in Table 1-25 can be given the inverted flag, so that the
target action is performed on packets that do not match any of the specified
criteria. For example, if DROP is the target action, if “Inverted” is specified
for a source IP address, and if no other criteria are specified in the rule, any
packets arriving from any other source IP address are dropped.
Tasks for Administering Packet Filtering
Administrators can do the following tasks to specify packet filtering:
• Add new rules for existing chains
• Edit or delete administrator-added rules
The following table lists the tasks related to configuring packet filtering and
where the Web Manager procedures for performing the tasks are described.
Fragments
The types of packets to be filtered:
• All packets and fragments
• Head fragments and unfragmented packets
• Non-head fragments only
Rule target
• Accept
• Drop
• Reject
Table 1-26: Tasks for Configuring Packet Filtering (Firewall) Rules
Task Where Documented
Add a new rule, edit or delete a customer-
added rule “Configuring Firewall Rules for OnBoard
Packet Filtering” on page 239
“To Add a New Packet Filtering
(Firewall) Rule” on page 241
“To Edit an Administrator-added Packet
Filtering (Firewall) Rule” on page 241
Table 1-25: Filter Options for Packet Filtering Rules
Filter Options Description