Sentry LE Series Manual page 54

LE/LE-HC Series DVR User Manual
V1.4 October 2006
Rule table
DROP / ACCEPT
Default to rule table can be selected as DROP or ACCEPT. If default is DROP, that means rules in
Rule table are accepted and all others are rejected. On the contrary, if default is ACCEPT, that
means rules in Rule table are rejected and all others are accepted.
Add / Edit
Adding or edit an IP address. "Mask" means domain address. For example, when IP address:
10.11.100.151 and Mask:255.255.255.0 are entered, this means IP addresses from 10.11.100.1 to
10.11.100.255 will be blocked totally.
HTTP: When the default is DROP and HTTP is NOT checked, this means the HTTP port of this IP
is rejected. On the contrary, if the default is ACCEPT and HTTP is NOT checked, that means the
HTTP port of this IP address is open.
FTP: Same as HTTP.
Rule table
Rules in the table are checked by top down sequence. When any one of the rules is satisfied,
checking will NOT go further down.
For Example:
Default Rule ACCEPT
1. 10.11.100.151/24 HF means IP's coming from 10.11.100.* are all rejected.
2. 10.11.100.154/32 means ports from 10.11.100.154 are all rejected EXCEPT HTTP and FTP.
If you use 10.11.100.154 to access the DVR web page, it would fail.
When the sequence of Rule1, Rule2 are exchanged and Default Rule is ACCEPT:
1. 10.11.100.154/32
2. 10.11.100.151/24 HF
Then, if you use 10.11.100.154 to access the DVR web page, it would work OK.
Delete
Delete a specific rule in the Rule table.
Delete All
Delete all rules in the Rule table
.
Up
Move a specific Rule one row up
- 53 -