Editing Generic Filters - ZyXEL Communications P-660HW-Tx v3 Series User Manual

Table 63 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule (continued)
LABEL
Port Compare
Source Address Enter the source IP address of the packet you wish to filter. This field is
Source Subnet
Netmask
Source Port
Port Compare
TCP Estab
More
Log
Action Match
Action Not
Match
Back
Apply
Cancel

12.2.3 Editing Generic Filters

Use this screen to display a generic filter set on your ZyXEL Device. The purpose
of generic rules is to allow you to filter non-IP packets. For IP packets, it is
generally easier to use the IP rules directly.
For generic rules, the ZyXEL Device treats a packet as a byte stream as opposed
to an IP or IPX packet. You specify the portion of the packet to check with the
P-660HW-Tx v3 Series User's Guide
DESCRIPTION
Select the comparison to apply to the destination port in the packet
against the value given in the Destination Port field.
Options are None, Equal, Not Equal, Less and Greater.
ignored if it is 0.0.0.0.
Enter the IP subnet mask for the source IP address
Enter the source port of the packets that you wish to filter. The range of
this field is 0 to 65535. This field is ignored if it is 0.
Select the comparison to apply to the source port in the packet against
the value given in the Source Port field.
Options are None, Equal, Not Equal, Less and Greater.
This field is only available when you select TCP in the Protocol field.
Select Yes to have the rule match packets that want to establish a TCP
connection. This field is ignored if you select No.
Select Yes to pass a matching packet to the next filter rule before an
action is taken. Select No to act upon the packet according to the action
fields.
Select a logging option from the following:
None – No packets will be logged.
Match - Only packets that match the rule parameters will be logged.
Not Match - Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Select the action for a matching packet.
Options are Check Next Rule, Forward and Drop.
Select the action for a packet not matching the rule.
Options are Check Next Rule, Forward and Drop.
Click this to return to the previous screen without saving.
Click this to save your changes.
Click this to restore your previously saved settings.
Chapter 12 Packet Filter
223