Index |
This object uniquely references this filter. The index
value is generated automatically. |
Descr |
A textual string describing this filter. |
Protocol |
This object specifies the value of the protocol field in
the ip header for all IP-datagrams belonging to the set.
If this object is set to dont-verify, the value of the
protocol field is not specified and can take any value. Enumerations: - icmp (1)
- ggp (3)
- ip (4)
- tcp (6)
- egp (8)
- igp (9)
- pup (12)
- chaos (16)
- udp (17)
- hmp (20)
- xns-idp (22)
- rdp (27)
- rsvp (46)
- gre (47)
- esp (50)
- ah (51)
- tlsp (56)
- skip (57)
- kryptolan (65)
- iso-ip (80)
- igrp (88)
- ospf (89)
- ipip (94)
- ipx-in-ip (111)
- vrrp (112)
- l2tp (115)
- delete (255)
- dont-verify (256)
|
SrcAddr |
This object specifies together with ipFilterSrcMask
the set of IP addresses of datagrams that belong to the
subset defined by this entry. If both objects are set to
0.0.0.0 the source-addresses for the datagrams in the set
is not specified and can take any value. |
SrcMask |
This object specifies together with ipFilterSrcAddr
the set of IP addresses of datagrams that belong to the
subset defined by this entry. If both objects are set to
0.0.0.0 the source-addresses for the datagrams in the set
is not specified and can take any value. |
SrcPort |
This object describes together with ipFilterSrcPortRange the
range of source portnumbers of the IP-datagrams belonging to
the set. All portnumbers between and including the two
objects are within the range.
If both objects are the to -1, the value of the source
portnumber is not specified and can take any value. |
SrcPortRange |
This object describes together with ipFilterDstPort the
range of source portnumbers of the IP-datagrams belonging to
the set. All portnumbers between and including the two
objects are within the range.
If both objects are the to -1, the value of the source
portnumber is not specified and can take any value. |
DstAddr |
This object describes together with ipFilterDstMask the
range of the target-addresses of the IP-datagrams belonging
to the set. If both objects are set to 0.0.0.0 the target-
addresses for the datagrams in the set is not specified
and can take any value. |
DstMask |
This object describes together with ipFilterDstAddr the
range of the target-addresses of the IP-datagrams belonging
to the set. If both objects are set to 0.0.0.0 the target-
addresses for the datagrams in the set is not specified
and can take any value. |
DstPort |
This object describes together with ipFilterDstPortRange the
range of target-portnumbers of the IP-datagrams belonging to
the set. All portnumbers between and including the two
objects are within the range.
If both objects are the to -1, the value of the target
portnumber is not specified and can take any value. |
DstPortRange |
This object describes together with ipFilterDstPort the
range of target-portnumbers of the IP-datagrams belonging to
the set. All portnumbers between and including the two
objects are within the range.
If both objects are the to -1, the value of the target
portnumber is not specified and can take any value. |
TcpConnState |
This object describes the state of the TCP connection
associated with the packets belonging to the set.
If this object is set to established, the value of the TCP
flags of incoming packets is checked. Packets with flags
that initiate TCP connections are excluded from the set.
If this object is set to dont-verify, the TCP flags are
not checked and can be any value. Enumerations: - dont-verify (1)
- established (2)
|
IcmpType |
This object describes the ICMP type of the packets belonging
to the set. If this object is set to dont-verify, the value
of the ICMP type field is not specified and can take any
value. Enumerations: - echoRep (1)
- destUnreach (4)
- srcQuench (5)
- redirect (6)
- echo (9)
- timeExcds (12)
- parmProb (13)
- timestamp (14)
- timestampRep (15)
- addrMask (16)
- addrMaskRep (17)
- dont-verify (31)
|
Tos |
This object describes together with ipFilterTosMask the
range of the Type of Service field (TOS) in the IP-header
of the IP-datagrams belonging to the set. A TOS value is
considered within the range, when the following equation
is valid:
(tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask)
If both objects are set to 0 the TOS value of the datagrams
in the set is not specified and can take any value. |
TosMask |
This object describes together with ipFilterTos the
range of the Type of Service field (TOS) in the IP-header
of the IP-datagrams belonging to the set. A TOS value is
considered within the range, when the following equation
is valid:
(tos & ipFilterTosMask) == (ipFilterTos & ipFilterTosMask)
If both objects are set to 0 the TOS value of the datagrams
in the set is not specified and can take any value. |