72
Example 2:
Filter Name
: Out_Filter2
Protocol
:
UDP
Source Address
: 192.168.1.45
Source Subnet Mask
: 255.255.255.0
Source Port
: 5060:6060
Dest. Address
: 172.16.13.4
Dest. Subnet Mask
: 255.255.255.0
Dest. Port
: 6060:7070
This filter will drop all UDP packets coming from the LAN with IP Address /
Subnet Mask of 192.168.1.45/24 and a source port range of 5060 to 6060,
destined to 172.16.13.4/24 and a destination port range of 6060 to 7070.
INCOMING IP FILTER
Helps in setting rules to ACCEPT packets from the WAN interface. By default, all
incoming IP traffic from the WAN is Blocked, if the Firewall is Enabled. By setting
up one or more filters, specific packet types coming from the WAN can be Accepted.
Filter Name:
User defined Filter Name.
Protocol:
TCP/UDP, TCP, UDP, or ICMP
Source IP Address/Source Subnet Mask:
Packets with the specific "Source
IP Address/Source Subnet Mask" combination will be accepted.
Source Port:
This can take on either a single port number or a range of port
numbers. Packets having a source port equal to this value or falling within the
range of port numbers(portX : portY) will be accepted.
Destination IP Address/Destination Subnet Mask:
Packets with the
specific
"Destination IP Address/Destination Subnet Mask" combination will be
accepted.
Destination Port:
This can take on either a single port number or a range of
port numbers. Packets having a destination port equal to this value or falling
within the range of port numbers(portX : portY) will be accepted.
The WAN interface on which these rules apply needs to be selected by the user.
Example 1:
Filter Name
: In_Filter1
Protocol
:
TCP
Source Address
: 210.168.219.45
Source Subnet Mask
: 255.255.0.0
Source Port
: 80
Dest. Address
: NA
Dest. Sub. Mask
: NA
Dest. Port
: NA
Selected WAN interface : mer_0_35/nas_0_35
This filter will ACCEPT all TCP packets coming from WAN interface
mer_0_35/nas_0_35 with IP Address/Subnet Mask 210.168.219.45/16 having
a source port of 80 irrespective of the destination. All other incoming packets
on this interface are DROPPED.