ZyXEL Communications ZyWALL 2 Series manual 448

ZyWALL 2 Series User’s Guide

Table 30-4 Menu 21.1.1.1: Generic Filter Rule

FIELD	DESCRIPTION	OPTIONS
Filter	Use [SPACE BAR] and then [ENTER] to select a rule type. Parameters	Generic Filter
Type	displayed below each type will be different. TCP/IP filter rules are used to	Rule
	filter IP packets while generic filter rules allow filtering of non-IP packets.	TCP/IP Filter
		Rule
Active	Select Yes to turn on the filter rule or No to turn it off.	Yes / No
Offset	Enter the starting byte of the data portion in the packet that you wish to	0-255
	compare. The range for this field is from 0 to 255.
Length	Enter the byte count of the data portion in the packet that you wish to	0-8
	compare. The range for this field is 0 to 8.
Mask	Enter the mask (in Hexadecimal notation) to apply to the data portion before
	comparison.
Value	Enter the value (in Hexadecimal notation) to compare with the data portion.
More	If Yes, a matching packet is passed to the next filter rule before an action is	Yes
	taken; else the packet is disposed of according to the action fields.	No
	If More is Yes, then Action Matched and Action Not Matched will be No.
Log	Select the logging option from the following:	None
	None - No packets will be logged.	Action Matched
	Action Matched - Only packets that match the rule parameters will be	Action Not
	logged.	Matched
	Action Not Matched - Only packets that do not match the rule parameters	Both
	will be logged.
	Both – All packets will be logged.
Action	Select the action for a packet matching the rule.	Check Next
Matched		Rule
		Forward
		Drop
Action	Select the action for a packet not matching the rule.	Check Next
Not		Rule
Matched		Forward
		Drop

Once you have completed filling in Menu 21.1.1.1 - Generic Filter Rule, press [ENTER] at the message “Press ENTER to Confirm” to save your configuration, or press [ESC] to cancel. This data will now be displayed on Menu 21.1.1 - Filter Rules Summary.

30-12 Filter Configuration