Draytek Vigor2912 User Manual page 213

Fragments
Filter
Branch to other Filter Set
Sessions Control
addition, if you want to use the service type from defined
groups or objects, please choose Group and Objects as the
Service Type.
Protocol - Specify the protocol(s) which this filter rule will
apply to.
Source/Destination Port –
(=) – when the first and last value are the same, it indicates
one port; when the first and last values are different, it
indicates a range for the port and available for this service
type.
(!=) – when the first and last value are the same,
indicates all the ports except the port defined here;
when the first and
last values are different, it indicates that
all the ports except the range defined here are available for
this service type.
(>) – the port number greater than this value is available.
(<) – the port number less than this value is available for
this profile.
Service Group/Object - Use the drop down list to choose
the one that you want.
Specify the action for fragmented packets. And it is used for
Data Filter only.
Don't care -No action will be taken towards fragmented
packets.
Unfragmented -Apply the rule to unfragmented packets.
Fragmented - Apply the rule to fragmented packets.
Too Short - Apply the rule only to packets that are too short
to contain a complete header.
Specifies the action to be taken when packets match the rule.
Block Immediately - Packets matching the rule will be
dropped immediately.
Pass Immediately - Packets matching the rule will be
passed immediately.
Block If No Further Match - A packet matching the rule,
and that does not match further rules, will be dropped.
Pass If No Further Match - A packet matching the rule,
and that does not match further rules, will be passed
through.
If the packet matches the filter rule, the next filter rule will
branch to the specified filter set. Select next filter rule to
branch from the drop-down menu. Be aware that the router
will apply the specified filter rule for ever and will not
return to previous filter rule any more.
The number typed here is the total sessions of the packets
that do not match the filter rule configured in this page. The
203
it
Vigor2912 Series User's Guide