ZyXEL Communications ZyWALL 10/10, User Manual

Page: 192 / 342

ZyWALL 10/10 II/50 Internet Security Gateway
18-6 Filter Configuration
18.2.1 Filter Rules Summary Menu
This screen shows the summary of the existing rules in the filter set. The following tables contain a brief
description of the abbreviations used in the previous menus.
Table 18-1 Abbreviations Used in the Filter Rules Summary Menu
FIELD DESCRIPTION
# The filter rule number: 1 to 6.
A Active: “Y” means the rule is active. “N” means the rule is inactive.
Type The type of filter rule: “GEN” for Generic, “IP” for TCP/IP.
Filter Rules These parameters are displayed here.
M More.
“Y” means there are more rules to check which form a rule chain with the present
rule. An action cannot be taken until the rule chain is complete.
“N” means there are no more rules to check. You can specify an action to be taken
i.e., forward the packet, drop the packet or check the next rule. For the latter, the
next rule is independent of the rule just checked.
m Action Matched.
“F” means to forward the packet immediately and skip checking the remaining rules.
“D” means to drop the packet.
“N“ means to check the next rule.
n Action Not Matched.
“F” means to forward the packet immediately and skip checking the remaining rules.
“D” means to drop the packet.
“N” means to check the next rule.
The protocol dependent filter rules abbreviation are listed as follows:
Table 18-2 Rule Abbreviations Used
ABBREVIATION DESCRIPTION
IP
Pr Protocol
SA Source Address
SP Source Port number
DA Destination Address