Pepwave MAX, Руководство пользователя

Страница: 85 / 121

http://www.pepwave.com 85 Copyright @ 2013 Pepwave
Alternatively, the Protocol Selection Tool drop-down menu can be used to automatically
fill in the Protocol and Port number of common Internet services (e.g. HTTP, HTTPS, etc.)
After selecting an item from the Protocol Selection Tool drop-down menu, the Protocol and
Port number remains manually modifiable.
Source IP & Port
This specifies the source IP address(es) and port number(s) to be matched for a firewall
rule.
A single address, or a network, can be specified as the Source IP & Port setting, as
indicated with the following screenshots:
In addition, a single port, or a range of ports, can be specified for the Source IP & Port
setting.
Destination IP &
Port
This specifies the destination IP address(es) and port number(s) to be matched for a
firewall rule.
A single address, or a network, can be specified as the Source IP & Port setting, as
indicated with the following screenshots:
In addition, a single port, or a range of ports, can be specified for the Source IP & Port
setting.
Action
This setting specifies the action to be taken by Pepwave MAX upon encountering traffic
that matches the both of the following:

Source IP & Port

Destination IP & Port

With the value of Allow for the Action setting, the matching traffic passes through
Pepwave MAX (to be routed to the destination).

If the value of the Action setting is set to Deny , the matching traffic does not pass
through Pepwave MAX (and is discarded).
Event Logging
This setting specifies whether or not to log matched firewall events.
The logged messages are shown on the page Status >Event Log .
A sample message is as follows:
Aug 13 23:47:44 Denied CONN=Ethernet WAN SRC=20.3.2.1
DST=192.168.1.20 LEN=48 PROTO=TCP SPT=2260 DPT=80

CONN : The connection where the log entry refers to

SRC : Source IP address

DST : Destination IP address

LEN : Packet length

PROTO : Protocol

SPT : Source port

DPT : Destination port