P-660 series Support Notes
red before. Instead, when ZyNOS translates the old
ll verify the filter rules and log the
ystem log (Menu 24.3.1) before putting your device
he P-660 will disable its
routing/bridging functions if there is an inconsistency among its filter rules.
1. A filter for blocking the web service
client
3. A filter for blocking a specific MAC address
BIOS packets
Configuration
Before configuring a filter, you need to know the following information:
uld be as following:
t, TCP (06) protocol with port number 80
b. DNS packet, TCP (06) protocol with port number 53 or
number 53
address will be 0.0.0.0. Otherwise, you
have to enter an IP Address for the workstation you want to block. See the procedure
.1.2, Menu 21.1.3
ol with port number 80
l with port number 53
l with port number 53
3. Apply the filter set in menu 4
filter sets that were configu
configuration into the new format, it wi
inconsistencies. Please check the s
into use.
In order to avoid operational problems later, t
Filter Examples
2. A filter for blocking a specific
4. A filter for blocking the Net
A filter for blocking the web service
1. The outbound packet type (protocol & port number)
2. The source IP address
Generally, the outbound packets for Web service co
a. HTTP packe
c. DNS packet, UDP (17) protocol with port
For all workstation on the LAN, the source IP
for configuring this filter below.
1. Create a filter set in Menu 21, e.g., set 1
2. Create three filter rules in Menu 21.1.1, Menu 21
• Rule 1- block the HTTP packet, TCP (06) protoc
• Rule 2- block the DNS packet, TCP (06) protoco
• Rule 3- block the DNS packet, UDP (17) protoco
65
All contents copyright © 2005 ZyXEL Communications Corporation.
To Next Page
Loading...
