User manual

8-28 Packet Filter

IPX Call Filtering

You define IPX call filtering rules in the IPX-CALL protocol

section of the filter file. Like the rules defined in the IPX

protocol section, the IP-CALL filtering rules compare the source

or destination network address, host address and socket number

of an IPX packet the rules defined in the IPX-CALL filter rules.

AppleTalk Packet Filter Rule Examples

This section briefly describes AppleTalk packet filtering options,

and provides rule examples for each AppleTalk packet filtering

capability. This section includes the following topics:

• Source and Destination Host Filtering

• Source and Destination Node Filtering

• Source and Destination Socket Number Filtering

• ZIP Packet Filtering

• AppleTalk Call Filtering

• Generic AppleTalk Filtering

Source and Destination Network Filtering

To filter AppleTalk source and destination networks, the

network must be specified as an AppleTalk network number in

decimal format.

The following rule example rejects AppleTalk packets with a

source network address of 809:

ATALK:

010 REJECT src-network = 809;

020 REJECT dst-network = 799;

Source and Destination Node Filtering

To filter AppleTalk source and destination nodes, the node must

be specified as an AppleTalk node number in decimal format.

The following rule example accepts AppleTalk packets with a

destination node address of 704:

ATALK:

010 ACCEPT dest-host = 704;