Figure 66 Executing an IP filter
Packet
into IP Filter
Filter Active?
Yes
Apply SrcAddrMask
to Src Addr
Check Src
IP Addr
Matched
Apply DestAddrMask
to Dest Addr
Check Dest
IP Addr
Matched
Check
IP Protocol
Matched
Check Src &
Dest Port
Matched
More?
No
Action Matched
Drop
Forward
Drop Packet
Nortel Business Secure Router 222 Configuration — Advanced
No
Not Matched
Not Matched
Not Matched
Not Matched
Yes
Check Next Rule
Check Next Rule
Check Next Rule
Chapter 11 Filter configuration 145
Action Not Matched
Drop
Forward
Accept Packet