User manual

Packet Filters 8-2

Source and Destination Socket Number Filtering

You can compare the source or destination AppleTalk socket

number contained in the packet to the socket number defined in

the filter rules. You must specify the type of the comparison.

For example, the following rule example accepts AppleTalk

packets with the AppleTalk source socket number 0x02:

ATALK:

010 ACCEPT src-socket = 0x02;

ZIP Packet Filtering

You define AppleTalk ZIP (Zone Information Protocol) packet

filtering rules in the ATALK-ZIP protocol section of the filter

file. You can filter ZIP packets by zone name.

Note: The NETServer does not support filtering of incoming ZIP

packets (input filters). You can only filter AppleTalk ZIP

packets that are exiting the NETServer (output filters).

The following rule example allows the NETServer to forward

ZIP packets from a zone called marketing_2:

ATALK-ZIP:

010 ACCEPT zone-name = marketing_2;

AppleTalk Call Filtering

You define AppleTalk call filtering rules in the ATALK-CALL

protocol section of the filter file. Like the rules defined in the

ATALK protocol section, the ATALK-CALL filtering rules

compare the source or destination host, node, and socket

number of an AppleTalk packet the rules defined in the

ATALK-CALL filter rules.