Example Filter; Table 140 Generic Filter Rule Menu Fields - ZyXEL Communications P-870HW-I Series User Manual

Table 140 Generic Filter Rule Menu Fields

FIELD
Filter #
Filter Type
Active
Offset
Length
Mask
Value
More
Log
Action
Matched
Action Not
Matched

30.3 Example Filter

Let's look at an example to block outside users from accessing the ZyXEL Device via telnet.
Chapter 30 Filter Setup
DESCRIPTION
This is the filter set, filter rule coordinates, i.e., 2,3 refers to the
second filter set and the third rule of that set.
Use [SPACE BAR] and then [ENTER] to select a rule type.
Parameters displayed below each type will be different. TCP/IP filter
rules are used to filter IP packets while generic filter rules allow
filtering of non-IP packets.
Select Yes to turn on the filter rule or No to turn it off.
Enter the starting byte of the data portion in the packet that you wish
to compare. The range for this field is from 0 to 255.
Enter the byte count of the data portion in the packet that you wish
to compare. The range for this field is 0 to 8.
Enter the mask (in Hexadecimal notation) to apply to the data
portion before comparison.
Enter the value (in Hexadecimal notation) to compare with the data
portion.
If Yes, a matching packet is passed to the next filter rule before an
action is taken; else the packet is disposed of according to the
action fields.
If More is Yes, then Action Matched and Action Not Matched will be
No.
Select the logging option from the following:
None - No packets will be logged.
Action Matched - Only packets that match the rule parameters will
be logged.
Action Not Matched - Only packets that do not match the rule
parameters will be logged.
Both – All packets will be logged.
Select the action for a packet matching the rule.
Select the action for a packet not matching the rule.
P-870HW-I1 User's Guide
OPTIONS
Generic Filter
Rule
TCP/IP Filter
Rule
Yes / No
0-255
0-8
Yes
No
None
Action Matched
Action Not
Matched
Both
Check Next Rule
Forward
Drop
Check Next Rule
Forward
Drop
297