User manual

LinkMAX

 HSA300 User Manual
113
Field Description
Protocol
The basic IP protocol criteria that must be
met for rule to be invoked. Using the options
in the drop-down list, you can specify that
packets must contain the selected protocol
(eq), that they must not contain the specified
protocol (neq), or that the rule can be invoked
regardless of the protocol (any). TCP, UDP,
and ICMP are commonly IP protocols; others
can be identified by number from 0-255, as
defined by the Internet Assigned Numbers
Authority (IANA).
Store State If this option is enabled, then stateful filtering
is performed and the rule is also applied in
the other direction on the given interface
during an IP session.
Source Port
Port number criteria for the computer(s) from
which the packet originates.
This field will be dimmed (unavailable for
entry) if you have not specified a protocol
criteria.
See the description of Src IP Address for the
selection options.
Dest Port
Port number criteria for the destination
computer(s) (i.e., the port number of the type
of computer to which the packet is being
sent).
This field will be dimmed (unavailable for
entry) unless you have selected TCP or UDP
as the protocol.
See the description of Src IP Address for the
selection options.
TCP Flag
Specifies whether the rule should apply only
to TCP packets that contain the synchronous
(SYN) flag, only to those that contain the non-
synchronous (NOT-SYN) flag, or to all TCP
packets. This field will be dimmed
(unavailable for entry) unless you selected
TCP as the protocol.
ICMP Type
Specifies whether the value in the type field
in ICMP packet headers will be used as a
criteria. The code value can be any decimal
value from 0-255. You can specify that the
value must equal (eq) or not equal (neq) the
specified value, or you can select any to
enable the rule to be invoked on all ICMP
packets. This field will be dimmed
(unavailable for entry) unless you specify
ICMP as the protocol.