Packet Filtering Page - McAfee SG310 Administration Manual

Firewall menu options
Packet filtering
• None - No connection tracking entry is created, so every packet is logged or rate-limited if either function
is enabled. Because no action is carried out, rule-matching continues as if no match had been made.
If no other rule matches the packet, the default is to drop the packet; unless there is an Allow action
further down the list of rules, a None rule behaves like a Drop rule.
See

Packet Filtering page

Packet Filtering page
Use this page to define rules for packet filtering. The factory default configuration includes the following
predefined packet filter rules (as shown in
• Drop local traffic from Internet
• Drop local traffic to Internet
• Drop DNS
• Drop Windows Networking
• Allow trusted interfaces traffic
• Allow all to Internet
• Allow DMZ to Internet
Figure 166 Packet Filtering page
You can edit and delete the rules as necessary. Click New to define a new rule. You can also use the add
above or add below icon to add a rule above or below an existing rule. If you use the New button, the rule
is added to the bottom of the table. Use the up or down arrows to reposition a rule. For more information
on icons, see Interface icons.
McAfee UTM Firewall 4.0.4 Administration Guide
for instructions on how to set the action for a particular Packet Filtering rule.
Figure 166).
161