ZyXEL Communications P-660H Series, User Manual

Page: 279 / 466

P-660H/HW-T Series User’ Guide
Chapter 29 Filter Configuration 278
The following figure illustrates the logic flow of an IP filter.
Port # Type the destination port of the packets you want to filter. The field range is 0 to
65535. A 0 field is ignored.
Port # Comp Select the comparison to apply to the destination port in the packet against the value
given in Destination: Port #. Choices are None , Less , Greater , Equal or Not
Equal .
Source:
IP Addr Type the source IP Address of the packet you want to filter. A 0.0.0.0 field is ignored.
IP Mask Type the IP mask to apply to the Source: IP Addr field.
Port # Type the source port of the packets you want to filter. The range of this field is 0 to
65535. A 0 field is ignored.
Port # Comp Select the comparison to apply to the source port in the packet against the value
given in Source: Port # field. Choices are None , Less , Greater , Equal or Not
Equal .
TCP Estab This applies only when the IP Protocol field is 6, TCP. If Yes , the rule matches
packets that want to establish TCP connection(s) (SYN=1 and ACK=0); else it is
ignored.
More If Yes , a matching packet is passed to the next filter rule before an action is taken or
else the packet is disposed of according to the action fields.
If
More is Yes , then Action Matched and Action Not Matched will be N/A.
Log Select the logging option from the following:
None – No packets will be logged.
Action Matched – Only packets that match the rule parameters will be logged.
Action Not Matched – Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Action Matched Select the action for a matching packet. Choices are Check Next Rule , Forward or
Drop .
Action Not
Matched
Select the action for a packet not matching the rule. Choices are Check Next Rule ,
Forward or Drop .
When you have completed this menu, press [ENTER] at the prompt “ Press ENTER to Confirm
or ESC to Cancel: ” to save your configuration, or press [ESC] at any time to cancel.
Table 96 Menu 21.1.x.1 TCP/IP Filter Rule (continued)
FIELD DESCRIPTION