Operation Manual

IPX RIP/SAP Filters
63 NT/MPRI – 4 Special NT/MPRI Settings
Filter profile “Internet outgoing“
IPX RIP/SAP Filters
For the IPX protocol, access to specific routes and network services can
be regulated by RIP/SAP filter rules. Both global and destination-spe-
cific RIP and SAP filters can be configured. These filters allow your IPX
network to be filtered completely, so that it becomes “invisible” either
to all outside users or to a specified call destination. It is also possible
to filter certain services such as local printer servers.
The RIP protocol (Routing Information Protocol) allows routers to ex-
change routing table information. By filtering these packets, it is possi-
ble to restrict access to particular routes and thus to networks. If some
RIP packets arriving at the router from the local network can be discard-
ed (by the RIP input filter), then the information in the router’s RIP table
can be reduced to the bare essentials.
IP Filter (Firewall), Destination Filter Profile “Internet outgoing”
Profile enabled
Name
Action if no rule
applies
Yes
Internet outgoing
Accept
Rules
Status Service/Source/
Destination
Action/Log Explanation
Enabled RIP Packets Deny This ensures that no one
from the outside knows your
network.
Enabled NetBIOS Packets Deny This filter exists in two forms
(in the filter profile and as a
“Special Filter”). It ensures
that your XP/2000/NT re-
sources (drives, printers,
etc.) are not advertised to
the outside. Packets such as
these generally would only
make it as far as the ISP, but
this rule still should be inclu-
ded in a comprehensive fil-
ter set.
ntmpri-e.book Seite 63 Donnerstag, 28. Februar 2002 11:26 11