Set/Define Filter Generic - Lantronix SCS Reference Manual

Command Reference

12.10.17 Set/Define Filter Generic

⎧ ⎫
SET
⎨ ⎬
FILTER filtername ... GENERIC OFFSET offset MASK mask
⎩ ⎭
DEFINE
Specifies a general filter rule that applies to any packet regardless of protocol. A Generic rule starts at a
location offset bytes from the beginning of the packet, applies the specified mask, and then compares the
result with a specified value. Multiple generic offset segments can be included in a single rule, subject to
the maximum command line length of 132 characters (see the example below).
Restrictions
Parameters
Examples
See Also
⎧
⎪
⎪
⎪
⎪
⎨
⎪
⎪
⎪
⎪
⎩
Requires privileged user status.
offset
Defines where in the data packet to apply the mask. May be a decimal value
from 0 to 1500, where 0 indicates the first data position in the packet.
mask
A hexadecimal or decimal number.
operator
(EQ, GE, GT, LE, LT, NE)
The options are: equal to (EQ), greater than or equal to (GE), greater than (GT),
less than or equal to (LE), less than (LT), and not equal to (NE).
value
A hexadecimal or decimal number.
Local>> DEFINE FILTER abc ADD DENY GENERIC OFFSET 0 MASK 0xff000000 GT
0x25000000 OFFSET 8 MASK 0xffffffff EQ 0x12345678
(Adds a rule containing two generic segments to filter abc.)
Define Site Filter, page 12-138; Clear/Purge IP Security, page 12-19; Define
Ports Dialback, page 12-70; Packet Filters and Firewalls, page 11-23
12-168
Security Commands
⎧ ⎫ ⎫
⎪ ⎪ ⎪
EQ
⎪ ⎪ ⎪
⎪ GE ⎪ ⎪
⎪ ⎪ ⎪
GT
⎨ ⎬ ⎬
value
⎪ ⎪ ⎪
LE
⎪ ⎪ ⎪
LT
⎪ ⎪ ⎪
⎪ ⎪ ⎪
NE
⎩ ⎭ ⎭