ELSA LANCOM Wireless L-II, Руководство пользователя

Страница: 49 / 71

|
Operating modes and functions
49
|
ELSA LANCOM Wireless L-II
|
EN
Object list Use the object list to define the objects to be filtered. The following may
apply as objects:
Protocols
Individual computers
Entire networks
Services
Any and all of these elements may be combined. Furthermore, objects can be
defined recursively. In this manner, for example, you could define objects for
the TCP and UDP protocols. Later, objects such as those for FTP (= TCP + ports
20 and 21), HTTP (= TCP + port 80) and DNS (= TCP, UDP + port 53) could be
added. These in turn could be combined into a single object, which would
contain all permissions.
Rule table Use the rule table to combine individual objects into filter rules. The rule
table contains the protocol being filtered, the source object, the target object
and the filter action to be executed.
The protocol and the source and target objects can consist of combined
objects or contain direct descriptions (such as %P6 for TCP), which are
separated by '+' or the space character. Direct descriptions are labeled with
'%'. Possible descriptions include:
Similar descriptions can form comma-separated lists, such as for host lists
and address lists (%A10.0.0.1, 10.0.0.2), or hyphened ranges, such as port
lists (%S20-25). Specifying '0' or an empty string indicates the 'ANY' object:
Description Function
%A IP address
%M Netmask
%S Service (port)
%L local net
%H Host name
%P Protocol (TCP/UDP/ICMP etc.)
all computers: %A0.0.0.0
all services: %S0
all protocols: %P0
100235 Wireless L-11.book Seite 49 Montag, 30. Oktober 2000 5:43 17