Generic Filter Rule - 3Com OfficeConnect 3CP4144 Cli User's Manual

Generic Filter Rule

following rules are used:
IP:
1 ACCEPT src-addr=xxx;
2 ACCEPT dst-addr=yyy;
999 DENY;
(This will only accept packets from the specified address(es); all other packets will
be rejected.)
The following table describes the keywords for each protocol section and their
legal operators used in the rule syntax. Value ranges are also given where ddd is a
decimal between 1 and 255, mask is a decimal between 1 and 32, and xx is a hex
number:
Table 6-4 Protocol Keywords
Protocol
Section Keyword
IP src-addr
dst-addr
tcp-src-port
tcp-dst-port
udp-src-port
udp-dst-port
protocol
generic
IP-RIP network
IPX src-net
dst-net
src-host
dst-host
src-socket
dst-socket
generic
IPX-RIP network
IPX-SAP network
node
server
service-type
socket
BR-ETH src-addr
dst-addr
generic
The syntax for generic filters is slightly different than that for other filters:
<line #> <verb> GENERIC => ORIGIN = <FRAME > DATA>/OFFSET = <# of bytes>/
LENGTH = <# of bytes>/MASK = < 0x Mask>/VALUE = <0x value>
ORIGIN - The location in the packet to start the offset count. This location can
be at byte 0 (FRAME) or at the start of the protocol data (DATA).
OFFSET - The number of bytes from the origin to skip before comparing the
value to the packet contents.
LENGTH - The number of bytes in the packet to compare to the value.
MASK - The mask to logically "and" with the packet contents before
comparing with the value (hex).
Creating Filters Using Command Line Interface
Operators Description and Value Range
=, != Source IP Address (ddd.ddd.ddd.ddd/mask)
=, != Destination IP Address (ddd.ddd.ddd.ddd/mask)
all TCP source port (1 - 65535)
all TCP destination port (1 - 65535)
all UDP source port (1-65535)
all UDP destination port (1-65535)
=, != IP protocol (UDP, TCP, ICMP)
= Generic filter
=, != IP network number (ddd.ddd.ddd.ddd/mask)
=, != Source IPX network (xx-xx-xx-xx)
=, != Destination IPX network (xx-xx-xx-xx)
=, != Source IPX host node address (xx-xx-xx-xx-xx-xx)
=, != Destination IPX host node address (xx-xx-xx-xx-xx-xx)
all Source IPX socket (0x1 - 0xFFFF)
all Destination IPX socket (0x1 - 0xFFFF)
= Generic Filter
=, != IPX network (xx-xx-xx-xx)
=, != IPX network (xx-xx-xx-xx)
=, != IPX node (xx-xx-xx-xx-xx-xx)
=, != Server name (character string to 32 characters)
=, != Service type (0x0 - 0xFFFF)
all Socket (0x1 - 0xFFFF)
=, != Source MAC address (xx-xx-xx-xx-xx-xx)
=, != Destination MAC address (xx-xx-xx-xx-xx-xx)
= Generic filter
6-31