Motorola Netopia Embedded Software Especificações descarregar pdf (Página 167)

167

Putting the parts together

When you display a ﬁlter set, its ﬁlters are displayed as rows in a table:

The table’s columns correspond to each ﬁlter’s attributes:

• #: The ﬁlter’s priority in the set. Filter number 1, with the highest priority, is ﬁrst in the table.

• Fwd: Shows whether the ﬁlter forwards (Yes) a packet or discards (No) it when there’s a match.

• Src-IP: The packet source IP address to match.

• Src-Mask: The packet source subnet mask to match.

• Dst-IP: The packet destination IP address to match.

• Dst-Mask: The packet destination IP address to match.

• Protocol: The protocol to match. This can be entered as a number (see the table below) or as TCP or

UDP if those protocols are used.

• Src Port: The source port to match. This is the port on the sending host that originated the packet.

• Dst Port: The destination port to match. This is the port on the receiving host for which the packet is

intended.

• NC: Indicates No Compare, where speciﬁed.

Filtering example #1

Returning to our ﬁltering rule example from above (see page 165), look at how a rule is translated into a ﬁl-

ter. Start with the rule, then ﬁll in the ﬁlter’s attributes:

• The rule you want to implement as a ﬁlter is:

“Block all Telnet attempts that originate from the remote host 199.211.211.17.”

Protocol Number to use Full name

N/A 0 Ignores protocol type

ICMP 1 Internet Control Message Protocol

TCP 6 Transmission Control Protocol

UDP 17 User Datagram Protocol

1 2 ... 162 163 164 165 166 167 168 169 170 171 172 ... 367 368

Sem comentários

Motorola Netopia Embedded Software Especificações Página 167