Avocent ACS 5000 manual Reject target, Firewall configuration procedures, To add a chain

84Cyclades® ACS 5000 Installation/Administration/User Guide

REJECT target

If REJECT is selected from the Target pull-down menu, the following pull-down menu appears.

Any Reject with option causes the input packet to be dropped and a reply packet of the specified type to be sent.

Table 7.11: Reply Packet Names and Definitions

Field Name

Reject with

icmp-net-unreachable icmp-host-unreachable icmp-port-unreachable icmp-proto-unreachable icmp-net-prohibited icmp-host-prohibited echo-reply

tcp-reset

Definition

Reject with means that the filter will drop the input packet and send back a reply packet according to any of the reject types listed below.

ICMP network unreachable alias.

ICMP host unreachable alias.

ICMP port unreachable alias.

ICMP protocol unreachable alias.

ICMP network prohibited alias.

ICMP host prohibited alias.

Echo reply alias.

TCP RST packet alias.

NOTE: The packets are matched (using tcp flags and appropriate reject type) with the REJECT target.

Firewall configuration procedures

The following sections describe the procedures for defining packet filtering:

To add a chain:

1.Go to Network - Firewall Configuration.

2.Click Add. The Add Chain dialog box appears.

3.Enter the name of the chain to be added in the Name field.

4.Click OK. The name of the new chain appears in the list.

NOTE: Spaces are not allowed in the chain name.

5.Add one or more rules to finish, as described in To add a rule: on page 85

To edit a chain:

Perform this procedure if you wish to change the policy for a default chain.