ZyXEL Communications P-870HW-I User Manual

P-870HW-I1 User’s Guide

294

Chapter 30 Filter Setup

The following figure illustrates the logic flow of an IP filter.

Port # Comp

Press [SPACE BAR] and then [ENTER] to select the comparison 

to apply to the destination port in the packet against the value 

given in Destination: Port #.

None
Less
Greater
Equal
Not Equal

Source

IP Addr

Enter the source IP Address of the packet you wish to filter. This 

field is ignored if it is 0.0.0.0.

0.0.0.0

IP Mask

Enter the IP mask to apply to the Source: IP Addr.

0.0.0.0

Port #

Enter the source port of the packets that you wish to filter. The 

range of this field is 0 to 65535. This field is ignored if it is 0.

0-65535

Port # Comp

Press [SPACE BAR] and then [ENTER] to select the comparison 

to apply to the source port in the packet against the value given 

in Source: Port #.

None
Less
Greater
Equal
Not Equal

TCP Estab

This field is applicable only when the IP Protocol field is 6, TCP. 

Press [SPACE BAR] and then [ENTER] to select Yes, to have 

the rule match packets that want to establish a TCP connection 

(SYN=1 and ACK=0); if No, it is ignored.

Yes
No

More

Press [SPACE BAR] and then [ENTER] to select Yes or No. If 

Yes, a matching packet is passed to the next filter rule before an 

action is taken; if No, the packet is disposed of according to the 

action fields.
If More is Yes, then Action Matched and Action Not Matched 

will be N/A.

Yes
No

Log

Press [SPACE BAR] and then [ENTER] to select a logging 

option from the following:

None – No packets will be logged.

Action Matched - Only packets that match the rule parameters 

will be logged.

Action Not Matched - Only packets that do not match the rule 

parameters will be logged.
Both – All packets will be logged.

None
Action 

Matched
Action Not 

Matched
Both

Action Matched

Press [SPACE BAR] and then [ENTER] to select the action for a 

matching packet.

Check Next 

Rule
Forward
Drop

Action Not Matched Press [SPACE BAR] and then [ENTER] to select the action for a 

packet not matching the rule.

Check Next 

Rule
Forward
Drop

Table 139   TCP/IP Filter Rule (continued)