User manual

8-24 Packet Filter

TCP UDP Description

518 518 ntalk (new terminal chat)

- 520 RIP

540 540 uucp (UNIX to UNIX copy)

540 540 uucp-rlogin

543 543 klogin (Kerberized login)

1642 - PortMux daemon

- 1645 RADIUS security

- 1646 RADIUS accounting

IP RIP Packet Filtering

Routing Information Protocol (RIP) packets are used to identify

all attached networks as well as the number of router hops

required to reach them. The responses are used to update a

router's routing table

If the NETServer is listening for or broadcasting RIP messages,

you should allow them to pass in the appropriate direction(s).

You define IP RIP filtering rules in the IP-RIP protocol section of

the filter file.

For example, if you want to filter all routes except the one

specified by the IP network address 195.12.254.45, you would

create the following rule:

IP-RIP:

010 ACCEPT network = 195.12.254.45;

This filter only allows the route 195.12.254.45 into the route

table. All other routes are rejected.

Tip: Spurious RIP messages can disrupt your routing tables. If

you are listening for RIP messages on a given interface, you may

wish to consider filtering out RIP updates from untrusted

networks.