D-Link GLB-802C User Manual page 28

CHAPTER-3
Src IP Address/Dest IP Address
Apply Stateful Inspection
D-Link GLB-802C ADSL2+ Router User Manual
Field
Start/End Time
Protocol
Description
The time range during which this rule is to be in
effect, specified in military units.
IP address criteria for the source computer(s)
(from which the packet originates) and the
destination computer. In the drop-down list, it is
possible to configure the rule to be invoked on
packets containing:
any: any source IP address.
lt: any source IP address that is numerically less
than the specified address.
lteq: any source IP address that is numerically
less than or equal to the specified address.
gt: any source IP address that is numerically
greater than the specified address.
eq: any source IP address that is numerically
equal to the specified address.
neq: any source IP address that is not equal to the
specified address.
range: any source IP address that is within the
specified range, including its endpoints.
out of range: any source IP address that is outside
the specified range.
self: the IP address of the ADSL/Ethernet router
interface on which this rule takes effect.
bcast: (destination address only) Specifies that
the rule will be invoked for any packets sent to the
broadcast address for the receiving interface. (The
broadcast address is used to send packets to all
hosts on the LAN or subnet connected to the
specified interface.) When this option is selected,
address need not be specified, so the address
fields are dimmed.
The basic IP protocol criteria that must be met for
rule to be invoked. Using the options in the
drop-down list, specify that packets must contain
the selected protocol (eq), that they must not
contain the specified protocol (neq), or that the
rule can be invoked regardless of the protocol
(any). TCP, UDP, and ICMP are common IP
protocols; others can be identified by number
from 0-255, as defined by the Internet Assigned
Numbers Authority (IANA).
When this option is enabled, packets are
monitored for their state (i.e., whether a packet is
the initiating packet or a subsequent packet in an
ongoing communication, etc). This option
provides a degree of security by
blocking/dropping packets that are not received in
the anticipated state. Such packets can signify an
unwelcome attempt to gain access to a network.
25