Security 13-7
How individual filters work
As described above, a filter applies criteria to an IP packet and then takes one of three actions:
A filter’s actions
■
Passes the packet to the local or remote network
■
Blocks (discards) the packet
■
Ignores the packet
A filter passes or blocks a packet only if it finds a match after applying its criteria. When no match occurs, the
filter ignores the packet.
A filtering rule
The criteria are based on information contained in the packets. A filter is simply a rule that prescribes cer tain
actions based on cer tain conditions. For example, the following rule qualifies as a filter:
Block all Telnet attempts that originate from the remote host 199.211.211.17.
This rule applies to Telnet packets that come from a host with the IP address 199.211.211.17. If a match
occurs, the packet is blocked.
Here is what this rule looks like when implemented as a filter on the Netopia R7100:
To understand this par ticular filter, look at the par ts of a filter.
Parts of a filter
A filter consists of criteria based on packet attributes. A typical filter can match a packet on any one of the
following attributes:
■
The source IP address (where the packet was sent from)
■
The destination IP address (where the packet is going)
■
The type of higher-layer Internet protocol the packet is carr ying, such as TCP or UDP
Port numbers
A filter can also match a packet’s por t number attributes, but only if the filter’s protocol type is set to TCP or
UDP, since only those protocols use por t numbers. The filter can be configured to match the following:
■
The source por t number (the por t on the sending host that originated the packet)
■
The destination por t number (the por t on the receiving host that the packet is destined for)
+-#--Source IP Addr--Dest IP Addr-----Proto-Src.Port-D.Port--On?-Fwd-+
+--------------------------------------------------------------------+
| 1 199.211.211.17 0.0.0.0 TCP 23 Yes No |
+--------------------------------------------------------------------+
Summary of Contents for R7100
Page 1: ...Netopia R7100 SDSL Router User s Reference Guide ...
Page 12: ...User s Reference Guide ...
Page 18: ...2 4 User s Reference Guide ...
Page 30: ...4 8 User s Reference Guide ...
Page 44: ...5 14 User s Reference Guide ...
Page 68: ...User s Reference Guide ...
Page 80: ...8 12 User s Reference Guide ...
Page 110: ...9 30 User s Reference Guide ...
Page 116: ...10 6 User s Reference Guide ...
Page 148: ...12 20 User s Reference Guide WAN Event History page ...
Page 150: ...12 22 User s Reference Guide ...
Page 200: ...User s Reference Guide ...
Page 206: ...A 6 User s Reference Guide ...
Page 220: ...B 14 User s Reference Guide ...
Page 234: ...E 4 User s Reference Guide ...
Page 240: ...F 6 User s Reference Guide ...
Page 250: ...8 User s Reference Guide ...
Page 256: ...Index 6 ...
Page 258: ...2 User s Reference Guide ...