828
Configuring IP Firewall Filters for an interface
N0008589 3.3
Configuring the order of the Output Filters for an interface
After you enter all of the Output filters, you need to set the order in which the filters are used.
The order of the Output Filter Rules is very important. The more specific rules, such as rules for
specific port numbers and addresses, should be placed first. TCP and UDP rules are typically more
specific and should be first. Rules for just the IP protocol should be placed last, because they
typically ignore port numbers and only match on IP addresses.
The following two examples show how the order of the rules affects what traffic can pass through
the IP Firewall.
Example 1
: Rule 1 is configured to Pass TCP protocol 25 from any IP address to 10.10.10.20.
Rule 2 is configured to Block any TCP protocol from any IP address to any IP address. If Rule 2 is
placed before Rule 1, then Rule 1 will never be reached because all TCP protocol 25 packets
destined for IP address 10.10.10.20 will be blocked by Rule 2 first.
Example 2
: Rule 1 is configured to Pass TCP protocol 6800 from IP address 192.168.10.20 to IP
address 10.10.10.20. Rule 2 is configured to Block all IP protocols from any IP address to any IP
address. If Rule 2 is placed before Rule 1, all TCP packets will match Rule 2 first and will be
blocked.
To configure the order of the output filters:
1
Click the
Output Filter Rules’ Order
tab.
The Output Filter Rules’ Configuration screen appears.
2
Type in the Output Filters’ Rule Order for the interface you are configuring.
3
Press the
Tab
key to save your settings.
Содержание BCM 3.7
Страница 1: ...Part No N0008589 3 3 December 2006 Business Communications Manager 3 7 Programming Operations Guide...
Страница 4: ...4 Software licensing N0008589 3 3...
Страница 32: ...32 Contents N0008589 3 3 W 937 Index 939...
Страница 46: ...46 Tables N0008589 3 3...
Страница 64: ...64 How to get help N0008589 3 3...
Страница 90: ...90 Manually activating Telnet N0008589 3 3...
Страница 116: ...116 Delayed system restart N0008589 3 3...
Страница 194: ...194 Configuring a data module N0008589 3 3...
Страница 276: ...276 Setting line telco features N0008589 3 3...
Страница 310: ...310 Using COS passwords N0008589 3 3...
Страница 364: ...364 Enhanced 911 E911 configuration N0008589 3 3...
Страница 380: ...380 Renumbering DNs N0008589 3 3...
Страница 398: ...398 Saving wizard pages on your computer N0008589 3 3...
Страница 458: ...458 Voice Mail settings N0008589 3 3...
Страница 488: ...488 Setting system telco features N0008589 3 3...
Страница 508: ...508 Other programming that affects public networking N0008589 3 3...
Страница 522: ...522 PRI networking using Call by Call services N0008589 3 3...
Страница 592: ...592 Monitoring Hunt groups N0008589 3 3...
Страница 636: ...636 Configuring Double Density N0008589 3 3...
Страница 640: ...640 Using the Network Update Wizard N0008589 3 3...
Страница 666: ...666 Importing and Exporting DHCP data N0008589 3 3...
Страница 722: ...722 Restarting the router N0008589 3 3...
Страница 726: ...726 Important Web Cache considerations N0008589 3 3...
Страница 748: ...748 Configuring an Interface with NAT N0008589 3 3...
Страница 794: ...794 IPSec N0008589 3 3...
Страница 818: ...818 Configuring the Policy Agent characteristics N0008589 3 3...
Страница 832: ...832 Firewall rules for Business Communications Manager with Dialup interfaces N0008589 3 3...
Страница 876: ...876 ISDN Programming N0008589 3 3...
Страница 1004: ...1004 Index N0008589 3 3...