ZyXEL Communications P-2302HWDL-P1 Support Notes page 23

allowed in the pre-ZyNOS v3.40 firmware. Thus when you upgrade the firmware to ZyNOS v3.40, the old
configuration is translated to the new format and any filter configuration inconsistence is logged. It is highly
recommended that you check the system log (in SMT menu 24.3.1) before setting up the device on the network.
Note: The Prestige automatically deactivates the routing/bridging functions when an inconsistency is detected in
the filter rule settings.
Filter to block web services
•
Configuration
Before configuring a filter, you need to know the following information:
1. The outbound packet type (the protocol and port number)
2. The source IP address
Generally, the outbound packets for a web service could be as follows:
a. HTTP packet, TCP (06) protocol with port number 80
b. DNS packet, TCP (06) protocol with port number 53 or
c. DNS packet, UDP (17) protocol with port number 53
To block web services on all LAN hosts, enter 0.0.0.0 for the source IP address. Otherwise enter the IP address
of a LAN computer to block web services for that computer. The configuration procedure is described below.
Create a filter set in SMT menu 21, for example, set 1
o
Create three filter rules in menu 21.1.1, 21.1.2, and 21.1.3
o
Apply the filter set in menu 4
o
1. Create a filter set in menu 21
Filter
Rule 1- block the HTTP packets, TCP (06) protocol type with port number 80
Rule 2- block the DNS packets, TCP (06) protocol type with port number 53
Rule 3- block the DNS packets, UDP (17) protocol type with port number 53
Menu 21 - Filter Set Configuration
All contents copyright (c) 2005 ZyXEL Communications Corporation.
Prestige 2302 Support Notes
Filter
23