
Chapter Nine: Advanced Installations IP filters
122
Action
• Drop: Discard data that matches the filter definition.
• Forward: Send data that matches the filter definition to the filter output.
Direction
• incoming: Data being received by the DIVA LAN ISDN Modem on the ISDN link.
• outgoing: Data being sent by the DIVA LAN ISDN Modem on the ISDN link.
• all: Both incoming and outgoing.
Source/Destination
• from: Examine the source IP address of the datagram.
• to: Examine the destination IP address of the datagram.
Location
• the Ethernet LAN: Sets the filter to match datagrams with network addresses that are the same as
that of the DIVA LAN ISDN Modem. By default, this is 192.168.1.0. A mask of 255.255.255.0 is
used to extract the network address.
• the network: Sets the filter to match datagrams with network addresses that are the same as that the
one you specify. Choosing this option requires that you supply the IP address of a class C network in
the next box. The filter uses a mask of 255.255.255.0 to extract the network address (class C network
mask).
• host: Sets the filter to match datagrams with IP addresses that are the same as the one you specify.
Choosing this option requires that you supply the IP address of the host computer in the next box.
The filter uses a mask of 255.255.255.255.
• anywhere: Sets the filter to ignore the source and destination address in the datagram.
Address
Only applies if you select the network or the host for location.
Protocol
IP datagrams can carry a wide variety of protocol traffic. The DIVA LAN ISDN Modem lets you filter the
many of the most popular protocols. The following descriptions explain some of the options that are
available.
• any: Applies the filter to any datagram.
• any well known: Applies the filter to any protocol using TCP or UDP ports in the range 0 to 1023.
See RFC 1700 for the complete list of protocols.
• UNIX: Applies the filter to any protocol using TCP or UDP ports in the range 512 to 1023. See RFC
1700 for the complete list of protocols.
• TCP: Many protocols (such as HTTP, FTP, Telnet, News) make use of TCP. If you filter all TCP
traffic you will prevent the use of these protocols. Note that access to the web configuration interface
occurs via HTTP and access to the command line interface (CLI) occurs via Telnet.
• UDP: Many protocols (such as SNMP, Time, TFTP, BOOTP) make use of UDP. If you filter all UDP
traffic, you will prevent the use of these protocols.
• FTP: Applies the filter to all datagrams containing the file transfer protocol.
• Web (HTTP): If you filter all HTTP traffic, you may not be able to reach the web configuration
interface. Filtering outgoing HTTP traffic can be used to prevent users from browsing on the Internet.
• Mail (SMTP): Applies the filter to all datagrams containing the mail (SMTP) protocol.
• Mail (POP3): Applies the filter to all datagrams containing the mail (POP3) protocol.
• Telnet: If you filter all Telnet traffic, you will not be able to reach the command line interface (CLI).
• TFTP: The DIVA LAN ISDN Modem can function as a TFTP server to support uploading and
downloading of configuration files. If you filter TFTP traffic, you will not be able to use this feature.
DIVA LAN ISDN Modem
Incoming data
Outgoing data
FAULT POWER
DIVA LAN ISDN Modem
ISDN
E4/CE1 E2 E3
LINK
Ethernet
B1 B2 D
Network
ISDN
Komentáře k této Příručce