Page 60 - Firewall Configuration | The Configuration Tree Functions |
The Custom Firewall Tab
The Custom tab is used to include specific filters in a Firewall profile. Each filter can allow new a session to be created for a specific address and protocol or it can be used to drop specific packets from passing across the link. Note that the first filter entry is displayed against the firewall name in the summary list.
To add a filter,
Notes: This allows you to enter a brief description of your filter specification. If the field is left empty the word “Entry” is inserted so that you are aware that a filter has been applied.
Remote IP Address: This can be used to specify the IP address of the device at the far end of the link or left blank to include packets destined for all IP addresses.
Remote IP Mask: Packets can be checked against a destination’s IP Address Mask. If the field is left blank then the default
Local IP Address: This can be used to specify the IP address of a local device or left blank to include packets originated by all local devices.
Local IP Mask: Packets can be checked against the local IP Address Mask. If the field is left blank then the default
IP Protocol: The IP port number to be matched. Port numbers define the IP applications. e.g. 1 for ICMP, 6 for TCP, 17 for UDP or 47 for GRE.
Match Offset: The offset in bytes (0 is the first byte of an IP packet) where checking for a specific port number, a range of port numbers, or data begins.
Match Length: The number of bytes to be checked, from the Match Offset point, against the Match Data and Match Mask settings (see below).
Page 60 - The Configuration Tree Functions | INDeX IPNC Cassette Administration Manual |
Firewall Configuration | 38DHB0002UKDD – Issue 7 (22/11/02) |