ZyWALL 2 Series User's Guide
into IP Filter
Filter Active?
Apply SrcAddrMask
to Src Addr
Check Src
Apply DestAddrMask
to Dest Addr
Check Dest
IP Protocol
Check Src &
Dest Port
Action Matched
Drop
Drop Packet
30-10
Packet
Yes
Not Matched
IP Addr
Matched
Not Matched
IP Addr
Matched
Check
Not Matched
Matched
Not Matched
Matched
More?
Yes
No
Check Next Rule
Forward
Figure 30-6 Executing an IP Filter
No
Check Next Rule
Check Next Rule
Action Not Matched
Drop
Forward
Accept Packet
Filter Configuration