Security 13-37

This incoming IP packet (10000000) has a source IP address that does not match the network address in the Source IP Address field (00000000) in the Netopia R5000 Series Router. This rule will forward this packet because the packet does not match.

Example 3

 

 

Filter Rule:

 

200.1.1.96

 

(Source IP Network Address)

 

 

 

 

 

 

 

 

 

 

 

 

 

255.255.255.240

 

(Source IP Mask)

 

 

 

 

 

 

 

 

 

 

 

 

 

Forward = No

 

(What happens on match)

 

 

 

 

 

 

 

 

 

Incoming packet has the source address of 200.1.1.184.

 

 

 

 

 

 

 

 

 

 

IP Address

Binary Representation

 

 

 

 

 

 

 

 

200.1.1.184

10111000

(Source address in incoming IP packet)

 

 

 

 

 

 

 

 

AND

 

 

 

 

 

 

 

 

 

 

255.255.255.240

11110000

(Perform the logical AND)

 

 

 

 

 

 

 

 

10110000

(Logical AND result)

 

 

 

 

 

 

 

 

Since the Source IP Network Address in the Netopia R5000 Series Router is 01100000, and the source IP address after the logical AND is 1011000, this rule does not match and this packet will be forwarded.

Example 4

 

 

Filter Rule:

 

200.1.1.96

 

(Source IP Network Address)

 

 

 

 

 

 

 

 

 

 

 

 

 

255.255.255.240

 

(Source IP Mask)

 

 

 

 

 

 

 

 

 

 

 

 

 

Forward = No

 

(What happens on match)

 

 

 

 

 

 

 

 

 

Incoming packet has the source address of 200.1.1.104.

 

 

 

 

 

 

 

 

 

 

IP Address

Binary Representation

 

 

 

 

 

 

 

 

200.1.1.104

01101000

(Source address in incoming IP packet)

 

 

 

 

 

 

 

 

AND

 

 

 

 

 

 

 

 

 

 

255.255.255.240

11110000

(Perform the logical AND)

 

 

 

 

 

 

 

 

01100000

(Logical AND result)

 

 

 

 

 

 

 

 

Page 215
Image 215
Netopia R5000 manual Example