•State – This is used to define the routing decision applied to the packet. The three routing decisions are described:
1.Forward – This allows the routing of the packet, if it has met the criteria of the corresponding filter.
2.Drop – This drops (doesn’t allow routing for) a specific packet that has met the criteria of the corresponding filter.
3.Disable – This does not apply the IP filter.
•Interface – This applies the filter to a specific interface, LAN or one of the ISDN interfaces.
•Protocol Type – This is a protocol identifier, as assigned by the Internet Assigned Numbers Authority (IANA). The values of this identifier are described in
1- This is Internet Control Message (ICMP), defined in RFC 792.
6 - This is Transmission Control (TCP), defined in RFC 793. 17 - This is User Datagram (UDP), defined in RFC 798.
•Src IP – This is the source address in the IP header of this packet.
•Src Netmask – This mask is
•Src Port – This is the source port, in the TCP or UDP header, of the packet.
•Src Port Operation – This comparison operation is applied to the source port (the Src Port parameter) value, of the TCP or UDP header.
•Dst IP – This is the destination address in the IP header of the packet.
•Dst Netmask – This mask is
•Dst Port – This is the destination port, in the TCP or UDP header, of the packet.
•Dst Port Operation – This comparison operation is applied to the destination port (the Dst Port parameter) value, of the TCP or UDP header.
•ICMP Type – This is the type field, in the ICMP header, used to identify a particular ICMP message.
•ICMP Code – This is the code field, in the ICMP header, used to further specify the ICMP type.
•TCP Flag – This is a hex number, representing the six flag bits in the TCP header. The value range is from 0 to 3F.
53