Comtrend Corporation CT-5361T, Руководство пользователя

Страница: 123 / 132

122
Destination IP Address/Destination Subnet Mask: Packets with the particular
"Destination IP Address/Destination Subnet Mask" combination will be dropped.
Destination Port: This can take on either a single port number or a range
of port numbers. Packets having a destination port equal to this value or falling
within the range of port numbers(portX : portY) will be dropped.
Examples:
1. Filter Name : Out_Filter1
Protocol : TCP
Source Address : 192.168.1.45
Source Subnet Mask : 255.255.255.0
Source Port : 80
Dest. Address :NA
Dest. Sub. Mask : NA
Dest. Port : NA
This filter will Drop all TCP packets coming from LAN with IP Address/Sub. Mask
192.168.1.45/24 having a source port of 80 irrespective of the destination. All other
packets will be Accepted.
2.
Filter Name : Out_Filter2
Protocol : UDP
Source Address : 192.168.1.45
Source Subnet Mask : 255.255.255.0
Source Port : 5060:6060
Dest. Address :172.16.13.4
Dest. Sub. Mask : 255.255.255.0
Dest. Port : 6060:7070
This filter will drop all UDP packets coming from LAN with IP Address/Sub.Mask
192.168.1.45/24 and a source port in the range of 5060 to 6060, destined
to 172.16.13.4/24 and a destination port in the range of 6060 to 7070.
Incoming IP Filtering:
Helps in setting rules to ACCEPT packets from the WAN interface. By default all
incoming IP traffic from WAN is Blocked, if the Firewall is Enabled. By setting up
one or more filters, particular packet types coming from the WAN can be Accepted.