User manual

Chapter 4 - Layer 3 Command Set - IP Networking Ipfw Command (IP Firewall)
Alvarion BreezeNET B130/B300 GigE 172 Operational User Manual
There are two classes (sets) of filters - prohibiting (reject) and permitting (accept).
Furthermore, a filter may be applied to all inbound packets or only to packets
arriving via a specific interface.
Each received packet is checked against all filters in the order they are put in the
set.
The first filter that matches the received packet determines how the packet will be
treated. If the filter is an accept filter, the packet is accepted, otherwise it is
rejected. If the packet matches no filter in the set, or if the set is empty, the packet
is accepted.
Filters are defined using the ipfw command. For example, a command
ipfw add reject all from 192.168.5.3 to 192.168.11.7
adds to the set of incoming filters a reject filter which will discard all packets with
source address 192.168.5.3 and destination address 192.168.11.7.
Figure 4-8: IPFW
CAUTION
The rejected packet will be discarded without notification to the sender.