Draytek Vigor3910 Series User Manual page 237

Fragments
Filter
Branch to other Filter
Set
Sessions Control
MAC Bind IP
Quality of Service
User Management
Vigor3910 Series User's Guide
Service Type.
Protocol - Specify the protocol(s) which this filter rule will
apply to.
Source/Destination Port –
(=) – when the first and last value are the same, it indicates
one port; when the first and last values are different, it
indicates a range for the port and available for this service
type.
(!=) – when the first and last value are the same, it
indicates all the ports except the port defined here; when
the first and last values are different, it indicates that all
the ports except the range defined here are available for
this service type.
(>) – the port number greater than this value is available.
(<) – the port number less than this value is available for
this profile.
Service Group/Object - Use the drop down list to choose
the one that you want.
Specify the action for fragmented packets. And it is used
for Data Filter only.
Don't care -No action will be taken towards fragmented
packets.
Unfragmented -Apply the rule to unfragmented packets.
Fragmented - Apply the rule to fragmented packets.
Too Short - Apply the rule only to packets that are too short
to contain a complete header.
Specifies the action to be taken when packets match the
rule.
Block Immediately - Packets matching the rule will be
dropped immediately.
Pass Immediately - Packets matching the rule will be
passed immediately.
Block If No Further Match - A packet matching the rule,
and that does not match further rules, will be dropped.
Pass If No Further Match - A packet matching the rule, and
that does not match further rules, will be passed through.
If the packet matches the filter rule, the next filter rule
will branch to the specified filter set. Select next filter rule
to branch from the drop-down menu. Be aware that the
router will apply the specified filter rule for ever and will
not return to previous filter rule any more.
The number typed here is the total sessions of the packets
that do not match the filter rule configured in this page.
The default setting is 60000.
Strict –Make the MAC address and IP address settings
configured in IP Object for Source IP and Destination IP
are bound for applying such filter rule.
No-Strict - no limitation.
Choose one of the QoS rules to be applied as firewall rule.
For detailed information of setting QoS, please refer to the
related section later.
Such item is available only when Rule-Based is selected in
User Management>>General Setup. The general firewall
227