ZyXEL Communications Prestige 861H-G1, User Manual

Page: 189 / 275

Prestige 861H User’s Guide
Filter Configuration 23-13
Figure 23-13 Menu 21.1.6.1 Sample Filter Rules Summary
23.7 Applying Filters and Factory Defaults
This section shows you where to apply the filter(s) after you design it (them). Sets of factory
default filter rules have been configured in menu 21 (but have not been applied) to filter traffic.
Table 23-5 Filter Sets Table
FILTER SETS DESCRIPTION
Input Filter Sets: Apply filters for incoming traffic. You may apply protocol or device
filter rules. See earlier in this chapter for information on filters.
Output Filter Sets: Apply filters for traffic leaving the Prestige. You may apply filter rules
for protocol or device filters. See earlier in this section for
information on types of filters.
Call Filter Sets: Apply filters to decide if a packet should be allowed to trigger a call.
23.7.1 Ethernet Traffic
You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain
packets, reduce traffic and prevent security breaches. Go to menu 3.1 (shown next) and type the
number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four
filter sets (from twelve) by typing their numbers separated by commas, for example, 3, 4, 6, 11.
The factory default filter set, NetBIOS_LAN, is inserted in the
protocol filters field under Input
Menu 21.1.6 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- --------------------------------------------------------------- - - -
1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F
2 N
3 N
4 N
5 N
6 N
Enter Filter Rule Number (1-6) to Configure: 1
M = N means an action can be taken immediately.
The action is to drop the packet ( m = D ) if the
action is matched and to forward the packet
immediately ( n = F ) if the action is not matched no
matter whether there are more rules to be
checked (there aren’t in this example).
This shows you that you have
configured and activated ( A = Y ) a
TCP/IP filter rule ( Type = IP , Pr = 6 )
for destination telnet ports ( DP =
23 ).