ZyXEL Communications ZyWALL 35 Series, User Manual

Page: 695 / 872

Chapter 45 Filter Configuration
ZyWALL 5/35/70 Series User’s Guide
695
Figure 439 Example Filter: Menu 21.1.3.1
The port number for the telnet service (TCP protocol) is 23 . See RFC 1060 for port numbers of
well-known services.
When you press [ENTER] to confirm, you will see the following screen. Note that there is
only one filter rule in this set.
Figure 440 Example Filter Rules Summary: Menu 21.1.3
This shows you that you have configured and activated ( A = Y ) a TCP/IP filter rule ( Type =
IP , Pr = 6 ) for destination telnet ports ( DP = 23 ).
M = N means an action can be taken immediately. The action is to drop the packet ( m = D ) if
the action is matched and to forward the packet immediately ( n = F ) if the action is not
matched no matter whether there are more rules to be checked (there aren’t in this example).
Menu 21.1.3.1 - TCP/IP Filter Rule
Filter #: 3,1
Filter Type= TCP/IP Filter Rule
Active= Yes
IP Protocol= 6 IP Source Route= No
Destination: IP Addr= 0.0.0.0
IP Mask= 0.0.0.0
Port #= 23
Port # Comp= Equal
Source: IP Addr= 0.0.0.0
IP Mask= 0.0.0.0
Port #= 0
Port # Comp= None
TCP Estab= No
More= No Log= None
Action Matched= Drop
Action Not Matched= Forward
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Menu 21.1.3 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- ----------------------------------------------- - - -
1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F
2 N
3 N
4 N7
5 N
6 N
Enter Filter Rule Number (1-6) to Configure: 1