3-11
Chapter 3 Understanding Erpcd
Using Remote Access Concentrator Server Tools for Windows NT
•
Criteria includes the conditions for the filter. This section uses a
keyword followed by a value. You can enter:
•
dst_address
(the destination address of the packet)
followed by an IP address.
•
dst_port
(the destination port) followed by a port number
from 1-65535 or by a service name.
•
src_port
(the source port number) followed by a port
number from 1-65535 or by a service name.
•
src_address
(the source address of the packet) followed by
an IP address.
•
address_pair
for incoming or outgoing packets passing
between two addresses, followed by two IP addresses. Enter
both addresses, separated by a space, on the same line. If you
use this keyword, you cannot use
dst_address
or
src_address
.
•
port_pair
for incoming or outgoing packets passing
between two ports or services, followed by a port number or
service name. If you use this keyword, you cannot use
dst_port
or
src_port
.
•
protocol
(the transport protocol of the packet) followed by
a number from 1 to 65535 or by
tcp
,
udp
, or
icmp
.
To match all addresses or port numbers, enter -
1
or
*
in place of an address or port number. For service
names, you can enter
domain
,
finger
,
ftp
,
name
,
nfs
,
nntp
,
rlogin
,
route
,
routed
,
router
,
rtelnet
,
sftp
,
smtp
,
telnet
,
tftp
,
time
,
who
,
or
login
.
•
Actions specify activity of a filter when its criteria match a
packet. Enter one or more of the following actions:
•
discard
discards the packet. If you use
syslog
,
icmp
, or
netact
with
discard
, the system discards the packet after
it takes those actions.
