Local Filters - BinTec X4100 User Manual

Access Security
Reorganizing a chain
Strategy
Select Reporting Method.
Press SAVE.
Proceed as follows to reorganize an existing chain of rules:
Go to IP A
CCESS
Select Index of Rule that gets Index 1.
Confirm with REORG.
If you work with Windows PCs in your network, it is usually advisable to define
a NetBIOS filter. An example of this configuration is explained step by step in
chapter 6.1.5, page 113.
9.2.9

Local Filters

Access to the local UDP and TCP services on
CAPI, trace, etc.) can be controlled via the separate Setup Tool menu
IP L S
OCAL ERVICES
fined here for each service. If no entry exists for a service, there are no access
restrictions for this service, i.e. access is possible to this service over all inter-
faces and from any source address, provided this is not prohibited by the use of
NAT (see chapter 9.2.7, page
page 319).
As soon as at least one entry for local filters exists in X4100/200/300, incoming
requests for the corresponding local services of
lowed if one of the following conditions is fulfilled:
The source address is 127.0.0.1 (loopback address).
No entry exists for the corresponding service.
The incoming call is expressly allowed by at least one entry.
The existing entries are processed in the order in which they are listed in the
corresponding table
localUdpAllowTable). If an entry in this sorted list does not apply, the next en-
L R
REORG.
ISTS ULES
A C . One or more restrictions can be de-
CCESS ONTROL
314) or global filters (see
in the SNMP shell
X4100/200/300
X4100/200/300 (telnet,
chapter 9.2.8,
X4100/200/300 are only al-
(localTcpAllowTable
User's Guide
9
or
331