Comtrend Corporation CT-5611E, Руководство пользователя

Страница: 80 / 82

Filter
Name : Out_Filter2
Protocol : UDP
Source Address : 192.168.1.45
Source Subnet Mask : 255.255.255.0
Source Port : 5060:6060
Destination Address : 172.16.13.4
Destination Subnet Mask : 255.255.255.0
Destination Port : 6060:7070
This filter will drop all UDP packets coming from LAN with IP Address/
Subnet Mask 192.168.1.45/24 and a source port in the range of 5060 to
6060, destined to 172.16.13.4/24 and a destination port in the range of
6060 to 7070.
Incoming IP Filtering:
Helps in setting rules to ACCEPT packets from the WAN interface. By default,
all incoming IP traffic from the WAN is Blocked, if the Firewall is Enabled. By
setting up one or more filters, particular packet types coming from the WAN
can be Accepted.
Filter Name: User defined Filter Name.
Protocol: Can take on any values from TCP/UDP, TCP, UDP or ICMP
Source IP Address/Source Subnet Mask: Packets with the particular
"Source IP Address/Source Subnet Mask" combination will be accepted.
Source Port: This can take on either a single port number or a range of
port numbers. Packets having a source port equal to this value or falling
within the range of port numbers (portX : portY) will be accepted.
Destination IP Address/Destination Subnet Mask: Packets with the
particular "Destination IP Address/Destination Subnet Mask" combination
will be accepted.
Destination Port: This can take on either a single port number or a range
of port numbers. Packets having a destination port equal to this value or
falling within the range of port numbers (portX : portY) will be accepted.
The WAN interface on which these rules apply needs to be selected by user.
Example 1:
Filter Name : In_Filter1
Protocol : TCP
Source Address : 210.168.219.45
Source Subnet Mask : 255.255.0.0
Source Port : 80
Destination Address : NA
Destination Submask : NA
Destination Port : NA
Selected WAN interface: mer_0_35/nas_0_35
This filter will ACCEPT all TCP packets coming from WAN interface
mer_0_35/nas_0_35 with IP Address/Sub. Mask 210.168.219.45/16
having a source port of 80 irrespective of the destination. All other
incoming packets on this interface are DROPPED.
79