8-6 Packet Filters
Filter Rule Format
A packet filter consists of a set of rules which you must create.
A newly created packet filter contains no rules. The number of
rules a packet filter may have is limited only by the amount of
available flash memory in the NETServer.
When entering rules at the command line, rules must be num-
bered. Rules are processed in order, starting at rule 1. There are
three types of packet filter rules: IPX rules, IP rules, and SAP
rules. A packet filter can contain all three types. Each type of
rule is numbered separately. So, a filter can contain an IP rule 3,
an IPX rule 3 and an SAP rule 3 all at the same time.
set <rule type> <name> <rule #> <
permit
|
deny
> <options>
For example:
set filter sales.in 3 permit icmp
The example adds IP rule 3 to the packet filter sales.in (or over-
writes the previous IP rule 3). Rule 3 permits all ICMP packets
to pass through the interface.
Rule Type
There are three types of filter rules (IP, IPX and SAP). A filter
can contain all three types of rules. The filter rule type com-
mand options are:
filter IP rules
ipxfilter IPX rules
sapfilter SAP rules
Name
This is the name of an existing filter.