Compatible-systems 5.4 Manuel d'utilisateur télécharger pdf (Page 207)

Chapter 12 - IPX Filtering 201

source and destination sockets should be used to implicitly filter the

packet type. NetBIOS propagate packets (type 14h) are an exception to

this rule.

• srcnet <operator> <network number> This option allows filtering of the

source network number contained in the packet. The number is specified

in hex. The keyword all may be used to specify all network number

values.

• dstnet <operator> <network number> This option allows filtering of the

destination network number contained in the packet. The number is spec-

ified in hex. The keyword all may be used to specify all network number

values.

• srcskt <operator> <socket number> This rule allows filtering of the

source socket contained in the packet. The number is specified in hex.

The following keywords may be used for well known socket values:

NCP(0451h), SAP(0452h), RIP(0453h), or DIAG(0456h). The

keyword all may be used to specify all socket numbers.

• dstskt <operator> <socket number> This rule allows filtering of the

destination socket contained in the packet. The number is specified in

hex. The keywords listed above for srcskt may also be used. The

keyword all may be used to specify all socket numbers.

• srcnode <operator> <node address> This rule allows filtering of the

source node address contained in the packet. The operator in this option

can only be “equality” or “inequality.”

The node address parameter is the IPX server node number specified as

an Ethernet address. An Ethernet address is specified as six hexadecimal

octets separated by dots or colons (e.g. 0.0.A5.0.0.1 or 0:0:A5:0:0:1).

The keyword all may be used to specify all node values.

• dstnode <operator> <node address> This rule allows filtering of the

destination node address contained in the packet. The operator in this

option can only be “equality” or “inequality.” The address parameter

should be entered as shown above for srcnode. The keyword all may

also be used.

IPX Packet Filter Rule Notification

Filter rule matches can optionally cause a log message to be sent. By default,

no logging of matches is performed. See the section on the Logging Config-

uration Dialog Box of this manual for more information.

• log The log keyword causes the device to send information about the

packet to syslog when the condition of the rule is met.

1 2 ... 202 203 204 205 206 207 208 209 210 211 212 ... 312 313

Pas de commentaire

Compatible-systems 5.4 Manuel d'utilisateur Page 207