ZyXEL Communications G.SHDSL.bis 4-port Security Gateway P-793H User Manual page 301

Table 116 Menu 21.1.1.1: TCP/IP Filter Rule
FIELD
IP Addr
IP Mask
Port #
Port # Comp
TCP Estab
More
Log
Action Matched
Action Not
Matched
When you have Menu 21.1.1.1 - TCP/IP Filter Rule configured, press [ENTER] at the message "Press
ENTER to Confirm" to save your configuration, or press [ESC] to cancel. This data will now be
displayed on Menu 21.1.1 - Filter Rules Summary.
The following figure illustrates the logic flow of an IP filter.
P-793H User's Guide
DESCRIPTION
Enter the source IP Address of the packet you wish to filter. This field is ignored if it
is 0.0.0.0.
Enter the IP mask to apply to the Source: IP Addr.
Enter the source port of the packets that you wish to filter. The range of this field is 0
to 65535. This field is ignored if it is 0.
Press [SPACE BAR] and then [ENTER] to select the comparison to apply to the
source port in the packet against the value given in Source: Port #.
Options are None, Equal, Not Equal, Less and Greater.
This field is applicable only when the IP Protocol field is 6, TCP. Press [SPACE
BAR] and then [ENTER] to select Yes, to have the rule match packets that want to
establish a TCP connection (SYN=1 and ACK=0); if No, it is ignored.
Press [SPACE BAR] and then [ENTER] to select Yes or No. If Yes, a matching
packet is passed to the next filter rule before an action is taken; if No, the packet is
disposed of according to the action fields.
If More is Yes, then Action Matched and Action Not Matched will be N/A.
Press [SPACE BAR] and then [ENTER] to select a logging option from the following:
None – No packets will be logged.
Action Matched - Only packets that match the rule parameters will be logged.
Action Not Matched - Only packets that do not match the rule parameters will be
logged.
Both – All packets will be logged.
Press [SPACE BAR] and then [ENTER] to select the action for a matching packet.
Options are Check Next Rule, Forward and Drop.
Press [SPACE BAR] and then [ENTER] to select the action for a packet not
matching the rule.
Options are Check Next Rule, Forward and Drop.
Chapter 30 Filter Configuration
301