8-72 User’s Reference Guide

This header information is what the packet filter uses to make filtering decisions. It is important to note that an IP packet filter does not look into the IP data stream (the User Data from above) to make filtering decisions. Generic filters can look into the data.

Basic protocol types

TCP: Transmission Control Protocol. TCP provides reliable packet delivery and has a retransmission mechanism (so packets are not lost). RFC 793 is the specification for TCP.

UDP: User Datagram Protocol. Unlike TCP, UDP does not guarantee reliable, sequenced packet delivery. If data does not reach its destination, UDP does not retransmit the data. RFC 768 is the specification for UDP.

There are many more ports defined in the Assigned Addresses RFC. The tables on page 8-66show some of these port assignments.

Filter Logic

Filter design is a test of logic, and filter rule ordering is critical. If a packet is passed through a series of filter rules and then the packet matches a rule, the appropriate action is taken. The packet will not pass through the remainder of the filter rules.

For example, if you had the following filter set...

Allow WWW access;

Allow FTP access;

Allow SMTP access;

Deny all other packets.

and a packet goes through these rules destined for FTP, the packet would pass through the first rule (WWW), go through the second rule (FTP), and match this rule; the packet is allowed through.

If you had this filter set for example....

Allow WWW access;

Allow FTP access;

Deny FTP access;

Deny all other packets.

and a packet goes through these rules destined for FTP, the packet would pass through the first filter rule (WWW), match the second rule (FTP), and the packet is allowed through. Even though the next rule is to deny all FTP traffic, the FTP packet will never make it to this rule.

Binary representation

It is easiest when doing filtering to convert the IP address and mask in question to binary. This will allow you to perform the logical AND to determine whether a packet matches a filter rule.

Logical AND function

When a packet is compared (in most cases) a logical AND function is performed. First the IP addresses and subnet masks are converted to binary and then combined with AND. The rules for the logical use of AND are as follows:

Page 72
Image 72
Netopia D7171 SDSL, D7100 SDSL, D3232 IDSL Basic protocol types, Filter Logic, Binary representation, Logical and function

D7100 SDSL, D3232 IDSL, D3100-I IDSL, D7171 SDSL specifications

Netopia offers a range of advanced digital subscriber line (DSL) modems that cater to various connectivity needs. Among these, the D7171 SDSL, D3100-I IDSL, D3232 IDSL, and D7100 SDSL models stand out for their robust features and technologies designed to enhance the user experience.

The Netopia D7171 SDSL modem is engineered for symmetrical digital subscriber line (SDSL) services, delivering equal upload and download speeds. It supports high-speed data transfers over standard copper lines, enabling businesses to maintain consistent performance for applications such as video conferencing and large file transfers. Key features of the D7171 include enhanced security protocols, a built-in firewall to protect against unauthorized access, and multiple interface options for flexible connectivity.

Moving to the D3100-I IDSL, this model caters to users who require a reliable internet connection over a longer distance than traditional DSL can provide. The IDSL technology enables it to function effectively in areas where standard DSL is unavailable or unreliable. It provides a lower bandwidth solution yet is valuable in reaching remote locations. This modem is particularly recognized for its ease of installation and robust performance, featuring built-in diagnostics that help troubleshoot potential connection issues.

In the same family, the D3232 IDSL offers similar advantages but with a focus on higher capacity and scalability. It is designed for small to medium enterprises that require greater bandwidth for multiple users or devices. This modem also supports both voice and data transmission, making it an attractive option for unified communications. The D3232 comes equipped with advanced networking features, including Quality of Service (QoS) capabilities to prioritize bandwidth for critical applications.

Lastly, the D7100 SDSL modem is distinguished by its versatility and high-performance output. Supporting SDSL standards, it is perfect for businesses that need reliable, symmetrical speeds. This model is characterized by its extensive range of connectivity options, including Ethernet ports and support for various network protocols, ensuring seamless integration into existing network infrastructures. Additionally, it boasts excellent reliability, making it a favored choice for mission-critical applications.

In summary, Netopia's DSL modems, including the D7171 SDSL, D3100-I IDSL, D3232 IDSL, and D7100 SDSL, provide scalable and reliable internet connectivity solutions tailored to meet diverse business needs. With cutting-edge technology and a suite of features designed for performance, these models are well-suited to enhance productivity and support modern communications.