User manual

Table Of Contents
Reference: Configuration options
101
The advanced feature enables content filtering. For example packets can be rejected if
they contain some specific data at a certain offset. If you do not want to use this option
do not select a file or choose an empty file.
Filtered content: Data
With a mouse click on the link a dialog box appears in which you can select a file that
contains the specific buffer.
Filtered content: Mask
With a mouse click on the link a dialog box appears in which you can select the specific
mask.
Filtered content: Offset
With a mouse click on the link a dialog box appears in which you can define the filtered
content offset. The offset is computed from where UDP header ends.
Predefined rules for the ICMP traffic monitor
Setting: Low Setting: Medium Setting: High
-
Do not discard
ICMP based on IP
address
Allow ICMP
packets from
address 0.0.0.0
with mask
0.0.0.0.
Don't log when
packet matches
rule.
Advanced: Discard
packets that have
following bytes
<empty> with
mask <empty> at
offset 0.
Same rule as for
medium level.
Accepting of ICMP packets
With a mouse click on the link you have the choice to allow or deny special defined
incoming ICMP packets.
IP address
By clicking on this link with the mouse, a dialog window opens in which you can enter
the required IP address.
IP mask
By clicking on this link with the mouse, a dialog window opens in which you can enter
the required IP mask.
Report file
By clicking on the link with the mouse you can decide whether to write to a report file or
not if the package complies with the rule.