User manual

94
Example 2:
Filter Name : Out_Filter2
Protocol : UDP
Source Address : 192.168.1.45
Source Subnet Mask : 255.255.255.0
Source Port : 5060:6060
Destination Address : 172.16.13.4
Destination Subnet Mask : 255.255.255.0
Destination Port : 6060:7070
This filter will drop all UDP packets coming from LAN with IP Address/ Subnet Mask
192.168.1.45/24 and a source port in the range of 5060 to 6060, destined to
172.16.13.4/24 and a destination port in the range of 6060 to 7070.
Incoming IP Filtering:
Helps in setting rules to ACCEPT packets from the WAN interface. By default, all
incoming IP traffic from the WAN is Blocked, if the Firewall is Enabled. By setting up
one or more filters, particular packet types coming from the WAN can be Accepted.
Filter Name: User defined Filter Name.
Protocol: Can take on any values from TCP/UDP, TCP, UDP or ICMP
Source IP Address/Source Subnet Mask: Packets with the particular "Source IP
Address/Source Subnet Mask" combination will be accepted.
Source Port: This can take on either a single port number or a range of port
numbers. Packets having a source port equal to this value or falling within the range
of port numbers (portX : portY) will be accepted.
Destination IP Address/Destination Subnet Mask: Packets with the particular
"Destination IP Address/Destination Subnet Mask" combination will be accepted.
Destination Port: This can take on either a single port number or a range of port
numbers. Packets having a destination port equal to this value or falling within the
range of port numbers (portX : portY) will be accepted.
The WAN interface on which these rules apply needs to be selected by user.
Example 1:
Filter Name : In_Filter1
Protocol : TCP
Source Address : 210.168.219.45
Source Subnet Mask : 255.255.0.0
Source Port : 80
Destination Address : NA
Destination Submask : NA
Destination Port : NA
Selected WAN interface: mer_0_35/nas_0_35
This filter will ACCEPT all TCP packets coming from WAN interface
mer_0_35/nas_0_35 with IP Address/Sub. Mask 210.168.219.45/16 having a
source port of 80 irrespective of the destination. All other incoming packets on this
interface are DROPPED.