236
C
14: H
HAPTER
ANDLING
P
F
ACKET
ILTERS
The following rule example accepts only TCP packets that have a
destination port number that is in the range of 24 to 39:
#filter
IP:
010 AND tcp-dst-port > 23;
020 ACCEPT tcp-dst-port < 40;
030 DENY;
The following rule example accepts only UDP packets that have a
destination port number that is in the range of 24 to 39:
#filter
IP:
010 AND udp-dst-port > 23;
020 ACCEPT udp-dst-port < 40;
030 DENY;
The following rule example rejects TCP and UDP packets:
#filter
IP:
010 REJECT protocol
020 REJECT protocol
=
tcp;
=
udp;