Draytek Vigor2000, Руководство пользователя

Страница: 94 / 129

5-18
Advanced Setup
For the Data Filter:
IN: Specify the rule for filtering incoming packets.
OUT: Specify the rule for filtering outgoing packets.
Protocol: Specify the protocol(s) this filter rule will apply to.
IP Address: Specify a source and destination IP address for
this filter rule to apply to. Placing the symbol "!" before a par-
ticular IP Address will prevent this rule from being applied to that
IP address. It is equal to the logical NOT operator.
Subnet Mask: Specify the Subnet Mask for the IP Address
column for this filter rule to apply to.
Operator: The operator column specifies the port number set-
tings. If the Start Port is empty, the Start Port and the End
Port column will be ignored. The filter rule will filter out any port
number.
= : If the End Port is empty, the filter rule will set the port
number to be the value of the Start Port . Otherwise, the
port number ranges between the Start Port and the End
Port (including the Start Port and the End Port ).
!= : If the End Port is empty, the port number is not equal
to the value of the Start Port. Otherwise, this port number
is not between the Start Port and the End Port (includ-
ing the Start Port and End Port ).
> : Specify the port number is larger than the Start Port
(includes the Start Port ).
< : Specify the port number is less than the Start Port
(includes the Start Port ).
Keep State : When checked, protocol information about the
TCP/UDP/ICMP communication sessions will be kept by the IP
Filter/Firewall (the Firewall
Protocol option (see fig. 5.x on page
5-17) requires that TCP or UDP or TCP/UDP or ICMP be se-
lected for this to operate correctly).