Filter Rule Format
A packet filter consists of a set of rules which you must create. A newly created packet filter contains no rules. The number of rules a packet filter may have is limited only by the amount of available flash memory in the NETServer.
When entering rules at the command line, rules must be num- bered. Rules are processed in order, starting at rule 1. There are three types of packet filter rules: IPX rules, IP rules, and SAP rules. A packet filter can contain all three types. Each type of rule is numbered separately. So, a filter can contain an IP rule 3, an IPX rule 3 and an SAP rule 3 all at the same time.
set <rule type> <name> <rule #> <permit deny> <options>
For example:
set filter sales.in 3 permit icmp
The example adds IP rule 3 to the packet filter sales.in (or over- writes the previous IP rule 3). Rule 3 permits all ICMP packets to pass through the interface.
Rule Type
There are three types of filter rules (IP, IPX and SAP). A filter can contain all three types of rules. The filter rule type com- mand options are:
filter | IP rules |
ipxfilter | IPX rules |
sapfilter | SAP rules |
Name
This is the name of an existing filter.
