ZyXEL Communications P-660HN-51 - V1.10 Manual page 160

Chapter 10 Firewall
Table 43 Access Control: Add/Edit (continued)
LABEL
Select Protocol
Protocol
Custom Source
Port
Custom
Destination Port
TCP Flag Mask
TCP Flag
Policy
Direction
Enable Rate Limit Select this check box to set a limit on the upstream/downstream
160
DESCRIPTION
Select the transport layer protocol that defines your customized port
from the drop-down list box.
If you want to configure a customized protocol, select Specific
Protocol.
This field is displayed only when you select Specific Protocol in
Select Protocol.
Choose the IP port (TCP/UDP, TCP, UDP, or ICMP) that defines your
customized port from the drop-down list box.
This field is displayed only when you select Specific Protocol in
Select Protocol.
Enter a single port number or the range of port numbers of the source.
This field is displayed only when you select Specific Protocol in
Select Protocol.
Enter a single port number or the range of port numbers of the
destination.
This field is displayed only when you select Specific Protocol in
Select Protocol and TCP/UDP or TCP as the protocol.
You can select the TCP flags you want to check in this field. Select one
or a combination of the following TCP flags:
• SYN: synchronize flag
• ACK: acknowledge flag
• URG: urgent flag
• PSH: push flag
• RST: reset flag
• FIN: finish flag
This field is displayed only when you select Specific Protocol in
Select Protocol and TCP/UDP or TCP as the protocol.
After specifying the TCP flags to check, you can select the TCP flags
you want to set. If a flag is set, the bit number is 1. If a flag is not set,
the bit number is 0. The ZyXEL Device will take the action that you
select in the Policy field below to the TCP flags that are set.
You can only set the TCP flags that you have selected to check in the
TCP Flag Mask field.
Use the drop-down list box to select whether to discard (DROP), deny
and send an ICMP destination-unreachable message to the sender of
(REJECT) or allow the passage of (ACCEPT) packets that match this
rule.
Use the drop-down list box to select the direction of traffic to which
this rule applies.
transmission rate for the specified protocol.
Specify how many packets per minute or second the transmission rate
is.
P-660HN-51 User's Guide