Configuring IP Filters
149
3. When you have finished selecting the criteria, make sure that
the [Enable] radio button is selected at the top of the page.
Then click [Submit]. After a [Confirmation] page appears, the
[IP Filter Configuration] page will redisplay with the new rule
showing in the table. If the security level of the rule matches
the globally configured setting, a green ball in the [Status]
column for that rule, indicating that the rule is now effective.
A red ball will display when the rule is disabled or if its security
level is different from the globally configured level.
4. Make sure that the [Security Level:], the [Private Default
Action:], [Public Default Action:] and [DMZ Default Action:]
settings on the [IP Filter Configuration] page are configured
as needed, then click [Submit]. A page appears to confirm
your changes.
5. Click the [Admin] tab, and then click [Commit & Reboot]
in the task bar.
6. Click [Commit] to save your changes to the permanent
memory.
IP filter rule examples
Example 1
Blocking a specific computer on your LAN from using accessing
web servers on the Internet:
1. Add a new rule for outgoing packets on the [ppp-0] interface
from any incoming interface (this would include the [eth-0]
and [usb-0] interfaces, for example).
2. Specify a source IP address of the computer you want
to block.