Lucent Technologies PortMaster 4, Configuration Manual

Page: 108 / 191

Creating Filters
8-6 PortMaster 4 Configuration Guide
To create a TCP filter rule, use the following command—entered on one line:
Command> set filter Filtername RuleNumber permit|deny [Ipaddress/NM
Ipaddress(dest)/NM] tcp [src eq|lt|gt Tport] [dst eq|lt|gt Tport]
[established] [log]
UDP Packets
You can filter UDP packets by source and destination IP address, or by UDP port
number. Appendix B, “TCP and UDP Ports and Services,” lists port numbers commonly
used for UDP and TCP port services. For a more complete list, see RFC 1700.
To create a UDP filter rule, use the following command—entered on one line:
Command> set filter Filtername RuleNumber permit|deny [Ipaddress/NM
Ipaddress(dest)/NM] udp [src eq|lt|gt Uport] [dst eq|lt|gt Uport]
[established] [log]
Creating IPX Filters
You can filter IPX packets in the following ways:
• Source and/or destination IPX network number
• Source and/or destination IPX node address
• Source and/or destination IPX socket number
To create an IPX filter rule, use the following command—entered on one line:
Command> set ipxfilter Filtername RuleNumber permit|deny [srcnet Ipxnetwork]
[srchost Ipxnode] [srcsocket eq|gt|lt Ipxsock] [dstnet Ipxnetwork]
[dsthost Ipxnode] [dstsocket eq|gt|lt Ipxsock]
Creating SAP Filters
The Service Advertising Protocol (SAP) is an IPX protocol used over routers and servers
that informs network clients of available network services and resources. SAP packets
can be filtered only on output. You can filter SAP packets according to the following
information about the server that is advertising the service via SAP:
• Name
• IPX network number
• IPX node address
• IPX socket number
To create a SAP filter rule, use the following command—entered on one line:
Command> set sapfilter Filtername RuleNumber permit|deny
[server String][network Ipxnetwork] [host Ipxnode] [socket eg|gt|lt Ipxsock]