EasyManua.ls Logo

Radware Alteon - Page 381

Radware Alteon
842 pages
Print Icon
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Loading...
Alteon Application Switch Operating System Application Guide
Filtering and Traffic Manipulation
Document ID: RDWR-ALOS-V2900_AG1302 381
5. Create a pair of filters to allow incoming and outgoing mail to and from the mail server.
Filter 2 allows incoming mail to reach the mail server, and Filter 3 allows outgoing mail to reach
the Internet:
6. Create a filter that allows local clients to browse the Web.
The filter must recognize and allow TCP traffic to reach the local client destination IP addresses if
traffic originates from any HTTP source port:
>> Filter 1# name allow matching traffic
(Provide a descriptive name for the
filter)
>> Filter 1# ena
(Enable the filter)
>> Filter 1# /cfg/slb/filt 2
(Select the menu for Filter 2)
>> Filter 2# sip any
(From any source IP address)
>> Filter 2# dip 205.177.15.3
(To mail server destination IP address)
>> Filter 2# dmask 255.255.255.255
(Set mask for exact destination address)
>> Filter 2# proto tcp
(For TCP protocol traffic)
>> Filter 2# sport any
(From any source port)
>> Filter 2# dport smtp
(To a SMTP destination port)
>> Filter 2# action allow
(Allow matching traffic to pass)
>> Filter 2# ena
(Enable the filter)
>> Filter 2# /cfg/slb/filt 3
(Select the menu for Filter 3)
>> Filter 3# sip 205.177.15.3
(From mail server source IP address)
>> Filter 3# smask 255.255.255.255
(Set mask for exact source address)
>> Filter 3# dip any
(To any destination IP address)
>> Filter 3# proto tcp
(For TCP protocol traffic)
>> Filter 3# sport smtp
(From a SMTP port)
>> Filter 3# dport any
(To any destination port)
>> Filter 3# action allow
(Allow matching traffic to pass)
>> Filter 3# ena
(Enable the filter)
>> Filter 3# /cfg/slb/filt 4
(Select the menu for Filter 4)
>> Filter 4# sip any
(From any source IP address)
>> Filter 4# dip 205.177.15.0
(To base local network destination
address)
>> Filter 4# dmask 255.255.255.0
(For entire subnet range)
>> Filter 4# proto tcp
(For TCP protocol traffic)
>> Filter 4# sport http
(From any source HTTP port)
>> Filter 4# dport any
(To any destination port)
>> Filter 4# action allow
(Allow matching traffic to pass)
>> Filter 4# name allow clients Web browse
(Provide a descriptive name for the filter)
>> Filter 4# ena
(Enable the filter)

Table of Contents

Other manuals for Radware Alteon