ZyWALL 2 and ZyWALL 2WE

Table 19-4 Generic Filter Rule Menu Fields

FIELD

DESCRIPTION

OPTIONS

 

 

 

Filter #

This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second

 

 

filter set and the third rule of that set.

 

 

 

 

Filter

Use [SPACE BAR] and then [ENTER] to select a rule type. Parameters

Generic Filter

Type

displayed below each type will be different. TCP/IP filter rules are used to

Rule

 

filter IP packets while generic filter rules allow filtering of non-IP packets.

TCP/IP Filter

 

 

Rule

Active

Select Yes to turn on the filter rule or No to turn it off.

Yes / No

 

 

 

Offset

Enter the starting byte of the data portion in the packet that you wish to

0-255

 

compare. The range for this field is from 0 to 255.

 

 

 

 

Length

Enter the byte count of the data portion in the packet that you wish to

0-8

 

compare. The range for this field is 0 to 8.

 

 

 

 

Mask

Enter the mask (in Hexadecimal notation) to apply to the data portion

 

 

before comparison.

 

 

 

 

Value

Enter the value (in Hexadecimal notation) to compare with the data portion.

 

 

 

 

More

If Yes, a matching packet is passed to the next filter rule before an action is

Yes

 

taken; else the packet is disposed of according to the action fields.

No

 

If More is Yes, then Action Matched and Action Not Matched will be No.

 

 

 

 

Log

Select the logging option from the following:

None

 

None - No packets will be logged.

Action

 

Action Matched - Only packets that match the rule parameters will be

Matched

 

logged.

Action Not

 

Action Not Matched - Only packets that do not match the rule parameters

Matched

 

will be logged.

Both

 

Both – All packets will be logged.

 

Action

Select the action for a packet matching the rule.

Check Next

Matched

 

Rule

 

 

Forward

 

 

Drop

Action

Select the action for a packet not matching the rule.

Check Next

Not

 

Rule

Matched

 

Forward

 

 

Drop

Once you have completed filling in Menu 21.4.1.1 - Generic Filter Rule, press [ENTER] at the message “Press ENTER to Confirm” to save your configuration, or press [ESC] to cancel. This data will now be displayed on Menu 21.1.1 - Filter Rules Summary.

19-12

Filter Configuration