D-Link NetDefend DFL-260E, Reference Manual

Page: 191 / 328

3.54. IDPRule
Description
An IDP Rule defines a filter for matching specific network traffic. When the filter criterion is met,
the IDP Rule Actions are evaluated and possible actions taken.
Properties
Index The index of the object, starting at 1. (Identifier)
Name Specifies a symbolic name for the rule. (Optional)
SourceInterface Specifies the name of the receiving interface to be
compared to the received packet.
SourceNetwork Specifies the sender span of IP addresses to be
compared to the received packet.
DestinationInterface Specifies the destination interface to be compared
to the received packet.
DestinationNetwork Specifies the span of IP addresses to be compared
to the destination IP of the received packet.
Service Specifies a service that will be used as a filter
parameter when matching traffic with this rule.
Schedule By adding a schedule to a rule, the firewall will only
allow that rule to trigger at those designated times.
(Optional)
InsertionEvasion Protect against insertion/evastion attacks. (Default:
Yes)
URIIllegalUTF8 Specifies what action to take if invalid UTF-8
characters are seen in a HTTP URI. (Default: Log)
URIIllegalHex Specifies what action to take when invalid
hexencoding (%xx) is seen in a HTTP URI. (Default:
DropLog)
URIDoubleEncode Specifies what action to take when seeing double
encoded characters in a HTTP URI. (Default: Ignore)
Comments Text describing the current object. (Optional)
Note
If no Index is specified when creating an instance of this type, the object will be placed
last in the list and the Index will be equal to the length of the list.
3.54.1. IDPRuleAction
Chapter 3: Configuration Reference
191