Table 15-1 Ip Filter Rule: Add - ZyXEL Communications Prestige 623 series User Manual

The following table describes the fields in this screen.
FIELD
Enable/Disable Select Enable to activate IP filtering. This is the default setting.
Select Disable de-activate IP filtering. If you disabled the feature, existing rules are
retained for future use.
Rule ID Enter a unique number for identification and prioritization purposes.
Rules are processed from lowest to highest on each data packet, until a match is
found. It is recommended that you assign rule IDs in multiples of 5 or 10 (e.g., 10, 20,
30) so that you leave enough room between them for inserting a new rule if
necessary.
Action Select Accept to forward a packet to a destination when the packet matches the rule
criteria.
Select Deny to discard the packet that match the rule criteria.
Direction Specify whether the rule should apply to incoming or outgoing data packets on the
selected interface.
Incoming refers to packets coming from the LAN, and Outgoing refers to packets
going to the Internet.
You can use rules that specify the incoming direction to prevent outside accesses to
your LAN. You can use rules that specify the outgoing direction to block LAN
accesses to the Internet.
Interface Specifies the interface on the Prestige on which the rule will take effect.
In Interface Specifies the interface from which packets must have been forwarded to the interface
specified in the previous selection. This option is valid only for the outgoing direction
and is useful only when the Prestige is configured with both a LAN and a USB
interface, or with multiple LAN or WAN interfaces.
For example, if your Prestige connects to two subnets (that is, it has two LAN
interfaces, eth-0 and eth-1) and you want to block one of the subnets (say, eth-1) from
accessing the web, you would create an outgoing rule on the WAN interface that
denies HTTP accesses. You would specify the eth-1 as the incoming interface.
Select Enable to create a log for any packets that match the criteria. The log entry will
Log Option
include the time of the violation, the source address of the computer responsible for
the violation, the destination IP address, the protocol used, the source and destination
ports, and the number violations occurred in the previous x minutes. (Logging may be
helpful when troubleshooting.) This information can also be e-mailed to designated
administrators. Otherwise select Disable.
Configuring IP Filters

Table 15-1 IP Filter Rule: Add

DESCRIPTION
Prestige 623 Series Dual-link ADSL Router
15-5