Ip Rip Packet Filtering Using Cli; Ipx Source And Destination Network Filtering Using Cli; Ipx Source And Destination Host Filtering Using Cli; Ipx Source And Destination Socket Number Filtering Using Cli - 3Com OfficeConnect 3CP4144 Cli User's Manual

Creating Filters Using Command Line Interface 6-33
IP:
1 REJECT protocol = TCP;

IP RIP Packet Filtering Using CLI

Routing Information Protocol (RIP) packets are used to identify all attached
networks as well as the number of router hops required to reach them. The
responses are used to update a router's routing table
If the router is listening for, or broadcasting RIP messages, you should allow them
to pass in the appropriate direction(s). You define IP RIP filtering rules in the IP-RIP
protocol section of the filter file.
For example, if you want to filter all routes except the one specified by the IP
network address 195.12.254.45, you would create this rule:
IP-RIP:
1 ACCEPT network = 195.12.254.45;
999 DENY;
This filter only allows the route 195.12.254.45 into the route table. All other
routes are rejected.
Spurious RIP messages can disrupt your routing tables. If you are listening for RIP
messages on a given interface, you may wish to consider filtering out RIP updates
from untrusted networks.

IPX Source and Destination Network Filtering Using CLI

IPX network numbers must be specified as an network number no greater than
8-digits in hexadecimal format. The following rule example rejects IPX packets
with a source address: 00-03-42-BF.
IPX:
1 REJECT src-net = 00-03-42-BF;

IPX Source and Destination Host Filtering Using CLI

Host addresses must consist of the 8-digit network number, followed by the four
digit node number in hexadecimal format.
The following rule example accepts IPX packets with a destination address of
04-0B-43-AA:
IPX:
1 ACCEPT dest-host = 04-0B-43-AA;
999 DENY;

IPX Source and Destination Socket Number Filtering Using CLI

Sockets numbers represent communications interfaces that let an application
access a network protocol by opening a socket and declaring a destination.
Sockets are useful because they provide a simple way to direct an application onto
the network.