Radware Alteon Application Manual page 381

>> Filter 1# name allow matching traffic
>> Filter 1# ena
5. Create a pair of filters to allow incoming and outgoing mail to and from the mail server.
Filter 2 allows incoming mail to reach the mail server, and Filter 3 allows outgoing mail to reach
the Internet:
>> Filter 1# /cfg/slb/filt 2
>> Filter 2# sip any
>> Filter 2# dip 205.177.15.3
>> Filter 2# dmask 255.255.255.255
>> Filter 2# proto tcp
>> Filter 2# sport any
>> Filter 2# dport smtp
>> Filter 2# action allow
>> Filter 2# ena
>> Filter 2# /cfg/slb/filt 3
>> Filter 3# sip 205.177.15.3
>> Filter 3# smask 255.255.255.255
>> Filter 3# dip any
>> Filter 3# proto tcp
>> Filter 3# sport smtp
>> Filter 3# dport any
>> Filter 3# action allow
>> Filter 3# ena
6. Create a filter that allows local clients to browse the Web.
The filter must recognize and allow TCP traffic to reach the local client destination IP addresses if
traffic originates from any HTTP source port:
>> Filter 3# /cfg/slb/filt 4
>> Filter 4# sip any
>> Filter 4# dip 205.177.15.0
>> Filter 4# dmask 255.255.255.0
>> Filter 4# proto tcp
>> Filter 4# sport http
>> Filter 4# dport any
>> Filter 4# action allow
>> Filter 4# name allow clients Web browse
>> Filter 4# ena
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
(Provide a descriptive name for the
filter)
(Enable the filter)
(Select the menu for Filter 2)
(From any source IP address)
(To mail server destination IP address)
(Set mask for exact destination address)
(For TCP protocol traffic)
(From any source port)
(To a SMTP destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the menu for Filter 3)
(From mail server source IP address)
(Set mask for exact source address)
(To any destination IP address)
(For TCP protocol traffic)
(From a SMTP port)
(To any destination port)
(Allow matching traffic to pass)
(Enable the filter)
(Select the menu for Filter 4)
(From any source IP address)
(To base local network destination
address)
(For entire subnet range)
(For TCP protocol traffic)
(From any source HTTP port)
(To any destination port)
(Allow matching traffic to pass)
(Provide a descriptive name for the filter)
(Enable the filter)
Filtering and Traffic Manipulation
381