User guide

Firewall Configuration
EN/LZT 108 6492 R1 65 (98)
April 2003
Field Description
TCP Flag Specifies whether the rule should apply only to TCP packets
that contain the synchronous (SYN) flag, only to those that
contain the non-synchronous (NOT-SYN) flag, or to all TCP
packets. This field will be dimmed (unavailable for entry)
unless you selected TCP as the protocol.
ICMP Type Specifies whether the value in the type field in ICMP packet
headers will be used as a criteria. The code value can be any
decimal value from 0 to 255. You can specify that the value
must be equal (eq) or not equal (neq) to the specified value, or
you can select any to enable the rule to be invoked on all ICMP
packets. This field will be dimmed (unavailable for entry)
unless you specify ICMP as the protocol.
ICMP Code Specifies whether the value in the code field in ICMP packet
headers will be used as a criteria. The code value can be any
decimal value from 0 to 255. You can specify that the value
must be equal (eq) or not equal (neq) to the specified value, or
you can select any to enable the rule to be invoked on all ICMP
packets. This field will be dimmed (unavailable for entry)
unless you specify ICMP as the protocol.
IP Frag Pkt Determines how the rule applies to IP packets that contain
fragments. You can choose from the following options:
Yes: The rule will be applied only to packets that contain
fragments.
No: The rule will be applied only to packets that do not contain
fragments.
Ignore: (Default) The rule will be applied to packets whether
or not they contain fragments, assuming that they match the
other criteria.
IP Option Pkt Determines whether the rule should apply to IP packets that
have options specified in their packet headers. You can choose
from the following options:
Yes: The rule will be applied only to packets that contain
header options.
No: The rule will be applied only to packets that do not contain
header options.
Ignore: (Default) The rule will be applied to packets whether
or not they contain header options, assuming that they match
the other criteria.
Packet Size Specifies that the IP Filter rule will take affect only on packets
whose size in bytes matches this criteria. (lt=less than,
gt=greater than, lteq=less than or equal to, etc).