Table of Contents
Advertisement
II.
Parameter explanation
Rule ID: Each rule must be assigned a sequential ID
number. Rules are processed from lowest to highest on
each data packet, until a match is found. It is
recommended that you assign rule IDs in multiples of 5 or
10 (e.g., 10, 20, 30) so that you leave enough room
between them for inserting a new rule if necessary.
Action: Specifying what the rule will do to a packet when
the packet matches the rule criteria. The action can be
Accept (forward to destination) or Deny (discard the
packet).
Direction: Specifying whether the rule should apply to data
packets that are incoming or outgoing on the selected
interface. Incoming refers to packets coming in to the LAN
on the interface, and Outgoing refers to packets going out
from the LAN. You can use rules that specify the incoming
direction to restrict external computers from accessing
your LAN.
Interface: The interface on the device on which the rule will
take effect.
In Interface: The interface from which packets must have
been forwarded to the interface specified in the previous
selection. This option is valid only on rules defined for the
outgoing direction.
Log Option: When Enabled is selected, a log entry will be
created on the system each time this rule is invoked. The
log entry will include the time of the violation, the source
address of the computer responsible for the violation, the
destination IP address, the protocol being used, the source
and destination ports, and the number of violations
54
Advertisement
Table of Contents
