Filter
Top Products
Vigor2800 Series User’s Guide
48
immediately.
Pass Immediately - Packets matching the rule will be passed
immediately.
Block If No Further Match - A packet matching the rule, and that
does not match further rules, will be dropped.
Pass If No Further Match - A packet matching the rule, and that
does not match further rules, will be passed through.
Branch to other Filter
Set
If the packet matches the filter rule, the next filter rule will branch
to the specified filter set. Select next filter rule to branch from the
drop-down menu.
Log Check this box to enable the log function. Use the Telnet command
log-f to view the logs.
Direction Set the direction of packet flow. It is for Data Filter only. For the
Call Filter, this setting is not available since Call Filter is only
applied to outgoing traffic.
Protocol Specify the protocol(s) which this filter rule will apply to.
IP Address Specify a source and destination IP address for this filter rule to
apply to. Place the symbol “!” before a specific IP Address will
prevent this rule from being applied to that IP address. To apply the
rule to all IP address, enter any or leave the field blank.
Subnet Mask Select the Subnet Mask for the IP Address column for this filter
rule to apply from the drop-down menu.
Operator, Start Port
and End Port
The operator column specifies the port number settings. If the Start
Port is empty, the Start Port and the End Port column will be
ignored. The filter rule will filter out any port number.
(=) If the End Port is empty, the filter rule will set the port
number to be the value of the Start Port. Otherwise, the port
number ranges between the Start Port and the End Port (including
the Start Port and the End Port).
(!=)If the End Port is empty, the port number is not equal to the
value of the Start Port. Otherwise, this port number is not between
the Start Port and the End Port (including the Start Port and End
Port).
(>) Specify the port number is larger than the Start Port (includes
the Start Port).
(<) Specify the port number is less than the Start Port (includes the
Start Port).
Keep State This function should work along with Direction, Protocol, IP
address, Subnet Mask, Operator, Start Port and End Port settings. It
is used for Data Filter only.
Keep State is in the same nature of modern term Stateful Packet
Inspection. It tracks packets, and accept the packets with
appropriate characteristics showing its state is legal as the protocol
defines. It will deny unsolicited incoming data. You may select
protocols from any, TCP, UDP, TCP/UDP, ICMP and IGMP.
Fragments Specify the action for fragmented packets. And it is used for Data
Filter only.
Don’t care -No action will be taken towards fragmented packets.
Unfragmented -Apply the rule to unfragmented packets.