
Chapter 5
5-2
IP filters
Typical criteria that you define in IP filters are packet source IP addresses,
packet destination IP addresses, and upper-layer protocol of the packet.
However, each protocol has its own specific set of criteria that can be
defined.
For a single filter, you can define multiple criteria in multiple, separate
statements. Each of these statements should reference the same identifying
name or number, to tie the statements to the same filter. You can have as
many criteria statements as you want, limited only by the available memory.
Of course, the more statements you have, the more difficult it is to
understand and maintain your filters.
Configuring IP filters
When you define an IP filter, you can filter traffic in two ways:
• The filter can filter traffic going to a specific destination, coming from a
specific destination, or both.
• The filter can allow network traffic through, or it can reject network
traffic.
To define an IP filter using the Configuration utility
1. In the navigation pane, click Filters.
The IP Filters screen opens.
2. In the IP Filters screen, click the Add button.
The Add IP Filter screen opens.
3. In the Add IP Filter screen, fill in the fields to define the filter. For
additional information about defining an IP filter, click the Help
button.
Note
For information on configuring IP filters from the command line, refer to
the IPFW man page by typing man ipfw at the command prompt. You can
configure more complex filtering by using the IPFW command line interface
than you can from the Configuration utility.
Any ipfw-specific settings will be removed if you subsequently modify the
filter using the Configuration utility.
Kommentare zu diesen Handbüchern