Configuring Filters 9-7
Creating Filters
Filtering TCP and UDP Packets
TCP Packets
You can filter TCP packets by source and destination IP address, or by TCP port number.
Appendix B, “TCP and UDP Ports and Services,” lists port numbers commonly used for
UDP and TCP port services. For a more complete list, see RFC 1700.
To create a TCP filter rule, use the following command—entered on one line:
Command> set filter Filtername RuleNumber permit|deny [Ipaddress/NM
Ipaddress(dest)/NM] tcp [src eq|lt|gt Tport] [dst eq|lt|gt Tport]
[established] [log]
UDP Packets
You can filter UDP packets by source and destination IP address, or by UDP port
number. Appendix B, “TCP and UDP Ports and Services,” lists port numbers commonly
used for UDP and TCP port services. For a more complete list, see RFC 1700.
To create a UDP filter rule, use the following command—entered on one line:
Command> set filter Filtername RuleNumber permit|deny [Ipaddress/NM
Ipaddress(dest)/NM] udp [src eq|lt|gt Tport] [dst eq|lt|gt Tport]
[established] [log]
Creating IPX Filters
You can filter IPX packets in the following ways:
• Source and/or destination IPX network number
• Source and/or destination IPX node address
• Source and/or destination IPX socket number
To create an IPX filter rule, use the following command—entered on one line:
Command> set ipxfilter Filtername RuleNumber permit|deny [srcnet Ipxnetwork]
[srchost Ipxnode] [srcsocket eq|gt|lt Ipxsock] [dstnet Ipxnetwork]
[dsthost Ipxnode] [dstsocket eq|gt|lt Ipxsock]
To Next Page
Loading...