Chapter 12 Packet Filter

 

Table 63 Security > Packet Filter > Edit (Protocol Filter) > Edit Rule (continued)

 

LABEL

DESCRIPTION

 

Port Compare

Select the comparison to apply to the destination port in the packet

 

 

against the value given in the Destination Port field.

 

 

Options are None, Equal, Not Equal, Less and Greater.

 

 

 

 

Source Address

Enter the source IP address of the packet you wish to filter. This field is

 

 

ignored if it is 0.0.0.0.

 

 

 

 

Source Subnet

Enter the IP subnet mask for the source IP address

 

Netmask

 

 

 

 

 

Source Port

Enter the source port of the packets that you wish to filter. The range of

 

 

this field is 0 to 65535. This field is ignored if it is 0.

 

 

 

 

Port Compare

Select the comparison to apply to the source port in the packet against

 

 

the value given in the Source Port field.

 

 

Options are None, Equal, Not Equal, Less and Greater.

 

 

 

 

TCP Estab

This field is only available when you select TCP in the Protocol field.

 

 

Select Yes to have the rule match packets that want to establish a TCP

 

 

connection. This field is ignored if you select No.

 

 

 

 

More

Select Yes to pass a matching packet to the next filter rule before an

 

 

action is taken. Select No to act upon the packet according to the action

 

 

fields.

 

 

 

 

Log

Select a logging option from the following:

 

 

None – No packets will be logged.

 

 

Match - Only packets that match the rule parameters will be logged.

 

 

Not Match - Only packets that do not match the rule parameters will be

 

 

logged.

 

 

Both – All packets will be logged.

 

 

 

 

Action Match

Select the action for a matching packet.

 

 

Options are Check Next Rule, Forward and Drop.

 

 

 

 

Action Not

Select the action for a packet not matching the rule.

 

Match

Options are Check Next Rule, Forward and Drop.

 

 

 

 

 

 

Back

Click this to return to the previous screen without saving.

 

 

 

 

Apply

Click this to save your changes.

 

 

 

 

Cancel

Click this to restore your previously saved settings.

 

 

 

12.2.3 Editing Generic Filters

Use this screen to display a generic filter set on your ZyXEL Device. The purpose of generic rules is to allow you to filter non-IP packets. For IP packets, it is generally easier to use the IP rules directly.

For generic rules, the ZyXEL Device treats a packet as a byte stream as opposed to an IP or IPX packet. You specify the portion of the packet to check with the

 

223

P-660HW-Tx v3 Series User’s Guide