Figure 32-7 Menu 21.1.4.1: Generic Filter Rule; Table 32-4 Generic Filter Rule Menu Fields - ZyXEL Communications ZyWALL 5 User Manual

ZyWALL 5 Internet Security Appliance
To configure a generic rule, select Generic Filter Rule in the Filter Type field in menu 21.1.4.1 and
press [ENTER] to open Generic Filter Rule, as shown below.
Filter #: 4,1
Filter Type= Generic Filter Rule
Active= No
Offset= 0
Length= 0
Mask= N/A
Value= N/A
More= No
Action Matched= Check Next Rule
Action Not Matched= Check Next Rule
Press ENTER to Confirm or ESC to Cancel:
The following table describes the fields in the Generic Filter Rule menu.
FIELD
Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second
filter set and the third rule of that set.
Filter Type Use [SPACE BAR] and then [ENTER] to select a rule type. Parameters
displayed below each type will be different. TCP/IP filter rules are used to
filter IP packets while generic filter rules allow filtering of non-IP packets.
Active Select Yes to turn on the filter rule or No to turn it off.
Offset Enter the starting byte of the data portion in the packet that you wish to
compare. The range for this field is from 0 to 255.
Length Enter the byte count of the data portion in the packet that you wish to
compare. The range for this field is 0 to 8.
Mask Enter the mask (in Hexadecimal notation) to apply to the data portion
before comparison.
Value Enter the value (in Hexadecimal notation) to compare with the data
portion.
If Yes, a matching packet is passed to the next filter rule before an action
More
is taken; else the packet is disposed of according to the action fields.
If More is Yes, then Action Matched and Action Not Matched will be No.
Log Select the logging option from the following:
None - No packets will be logged.
Action Matched - Only packets that match the rule parameters will be
logged.
Action Not Matched - Only packets that do not match the rule parameters
will be logged.
Both – All packets will be logged.
Action Select the action for a packet matching the rule.
Matched
32-8
Menu 21.1.4.1 - Generic Filter Rule
Log= None

Figure 32-7 Menu 21.1.4.1: Generic Filter Rule

Table 32-4 Generic Filter Rule Menu Fields

DESCRIPTION OPTIONS
Generic Filter
Rule
TCP/IP Filter Rule
Yes / No
0-255
0-8
Yes
No
None
Action Matched
Action Not
Matched
Both
Check Next Rule
Forward
Drop
Filter Configuration