User manual

Packet Filters 8-
9
The following table describes each field used in the rule syntax:
Field Description
line #
Each rule must have a unique line number (1- 999).
You must arrange rules in increasing order.
verb
This field can be one of the following:
ACCEPT - allow the packet access if the condition
is met
REJECT - do not allow the packet access if the
condition is met
AND - logically use the AND condition with
condition of the next rule to determine if the packet
is accepted or rejected. Both defined conditions
must be met.
keyword
For descriptions, see Keywords on page 8-31.
operator
Describes the relationship between the keyword
and its value. The operator field must be one of the
following:
= Equal
!= Not equal
> Greater than
< Less than
>= Greater or Equal
<= Less or Equal
=> Generic
value
Contains a entity appropriate for the keyword. For
descriptions, refer to Keywords on page 8-31.
Note: The OR operation can be implemented by successive
ACCEPT rules. For example, to accept a packet if the source
address is xxx, or the destination address is yyy, the following
rules are used:
IP:
010 ACCEPT src-addr=xxx
020 ACCEPT dst-addr=yyy