User Manual

Command Reference Security Commands
12-170
See Also Define Site Filter, page 12-140; Clear/Purge IP Security, page 12-17; Define
Ports Dialback, page 12-62; Packet Filters and Firewalls, page 11-22
12.11.17 Set/Define Filter Generic
Specifies a general filter rule that applies to any packet regardless of protocol. A Generic rule starts at a
location offset bytes from the beginning of the packet, applies the specified mask, and then compares the
result with a specified value. Multiple generic offset segments can be included in a single rule, subject to
the maximum command line length of 132 characters (see the example below).
Restrictions Requires privileged user status.
Parameters offset
Defines where in the data packet the SCS is to apply the mask. May be a
decimal value from 0 to 1500, where 0 indicates the first data position in the
packet.
mask
A hexadecimal or decimal number.
operator
(EQ, GE, GT, LE, LT, NE)
The available operators are: equal to (EQ), greater than or equal to (GE),
greater than (GT), less than or equal to (LE), less than (LT), and not equal to
(NE).
value
A hexadecimal or decimal number.
Examples
Local>> DEFINE FILTER abc ADD DENY GENERIC OFFSET 0 MASK 0xff000000
GT 0x25000000 OFFSET 8 MASK 0xffffffff EQ 0x12345678
(Adds a rule containing two generic segments to filter abc.)
See Also Define Site Filter, page 12-140; Clear/Purge IP Security, page 12-17; Define
Ports Dialback, page 12-62; Packet Filters and Firewalls, page 11-22
SET
DEFINE



FILTER filtername ... GENERIC OFFSET offset MASK mask
EQ
GE
GT
LE
LT
NE











value










