ZyXEL Communications P-660HN-F1A, User Manual

Page: 221 / 430

Chapter 12 Packet Filter
P-660HN-F1A User’s Guide
221
12.2.3 Editing Generic Filters
Use this screen to display a generic filter set on your P-660HN-F1A. The purpose
of generic rules is to allow you to filter non-IP packets. For IP packets, it is
generally easier to use the IP rules directly.
For generic rules, the P-660HN-F1A treats a packet as a byte stream as opposed
to an IP or IPX packet. You specify the portion of the packet to check with the
Offset (from 0) and the Length fields, both in bytes. The P-660HN-F1A applies
the Mask (bit-wise ANDing) to the data portion before comparing the result
against the Value to determine a match. The Mask and Value are specified in
Source Address Enter the source IP address of the packet you wish to filter. This field is
ignored if it is 0.0.0.0.
Source Subnet
Netmask Enter the IP subnet mask for the source IP address
Source Port Enter the source port of the packets that you wish to filter. The range of
this field is 0 to 65535. This field is ignored if it is 0.
Port Compare Select the comparison to apply to the source port in the packet against
the value given in the Source Port field.
Options are None, Equal, Not Equal, Less and Greater.
TCP Estab This field is only available when you select TCP in the Protocol field.
Select Yes to have the rule match packets that want to establish a TCP
connection. This field is ignored if you select No.
More Select Yes to pass a matching packet to the next filter rule before an
action is taken. Select No to act upon the packet according to the action
fields.
Log Select a logging option from the following:
None – No packets will be logged.
Match - Only packets that match the rule parameters will be logged.
Not Match - Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Action Match Select the action for a matching packet.
Options are Check Next Rule, Forward and Drop.
Action Not
Match Select the action for a packet not matching the rule.
Options are Check Next Rule, Forward and Drop.
Back Click this to return to the previous screen without saving.
Apply Click this to save your changes.
Cancel Click this to restore your previously saved settings.
Table 63 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule (continued)
LABEL DESCRIPTION