Prestige 645 ADSL Internet Access Router

 

 

 

Menu 21.3 - Filter Rules Summary

 

 

 

# A Type

Filter Rules

M m n

-

-

----

---------------------------------------------------------------

-

-

-

1

Y

IP

Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23

N

D

F

2N

3N

4N

5N

6N

Enter Filter Rule Number (1-6) to Configure: 1

This shows you that you have configured and activated (A = Y) a TCP/IP filter rule (Type = IP, Pr = 6) for destination telnet ports (DP = 23).

M = N means an action can be taken immediately. The action is to drop the packet (m = D) if the action is matched and to forward the packet immediately (n = F) if the action is not matched no matter whether there are more rules to be checked (there aren’t in this example).

Figure 8-15 Example Filter Rules Summary – Menu 21.3

After you’ve created the filter set, you must apply it. Step 1. Enter 11 from the main menu to go to menu 11. Step 2. Select a remote node number and press [ENTER].

Step 3. Go to the Edit Filter Sets field, press the [SPACE BAR] to select Yes and press [ENTER]. This brings you to menu 11.5. Apply the TELNET_WAN filter set (filter set 3) as shown later.

8.5Filter Types and SUA

There are two types of filter rules, Device Filter (Generic) rules and Protocol Filter (TCP/IP and IPX) rules. Device Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on the IP and IPX packets. When NAT/SUA (Network Address Translation/Single User Account) is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the Prestige applies the protocol

8-18

Filter Configuration