Avaya BCM 2.0 Programming Betriebsanweisung PDF herunterladen (Seite 239)

Configuring Enterprise Edge Services 239

P0911588 Issue 01 Enterprise Edge 2.0 Programming Operations Guide

Stateful packet filters protect your network against Internet attacks such as source

spoofing, where an attacker pretends to be a trusted user by using an IP address that

is within the accepted range of IP addresses of your internal network. Enterprise

Edge stateful packet filtering validates that addresses coming from outside the

network are valid outside addresses. Stateful packet filter also protect your network

from a denial-of-service attack, where an attacker tries to block valid users from

accessing a resource or a server.

Stateful filtering supports TCP, UDP, IP, and ICMP. Stateful filtering supports the

following applications: H.323, FTP, HTTP, POP3, Telnet, SMTP, DNS, DHCP,

TFTP, GOPHER, FINGER, NNTP, NetBios, POP2, RPC, SNMP and SUNNFS.

Stateful and basic filtering is configured based on the following criteria

Packet Filter Feature Comments

Source Address The source address box of the packet to be filtered.

Source Mask The source address mask of the address to be filtered.

Destination Address The destination address box of the packet to be filtered.

Destination Mask The destination address mask of the address to be filtered.

Protocol The protocol type of the packet to be filtered. Possible values

are TCP, UDP, ICMP or IP.

Source Port Range The source port or range of ports of the packet to be filtered.

This box applies only if protocol value is TCP or UDP.

Destination Port Range The destination port or range of ports of the packet to be

filtered. This box applies only if protocol value is TCP or UDP.

Rule Order In a comma separated list format, gives the order in which the

filter must apply the rules listed in the Rule Names box.

Rule Name Define rule name.

Stateful Select Yes if stateful filtering is required, or No if stateful

filtering is not required. Default: Yes.

Disposition Specifies the action to take for the packets matching a filter’s

criteria. This parameter must be set for each filter. Action to

take may be different from one filter to the next.

Values are: Block or Pass. Default: Block.

Source Routing Specifies whether or not to allow any source routing bits in the

IP options box in the IP header.

Values are: Ignore, Allow or Deny. Default: Ignore.

Status Specifies if the system enforces default filter policy of block all

incoming and pass all outgoing packets. If you disable status,

the system allows packets through.

Values are: Enabled or Disabled. Default: Disabled.

IP options Specifies whether of not to check any IP options are in the

packet.

Values are: Ignore, Allow or Deny. Default: Ignore.

Source IP Type For static source IP addresses, this box is set to Fixed.

Otherwise, it is set to Dynamic for source IP addresses.

Values are: Fixed, Dynamic. Default: Fixed.

1 2 ... 234 235 236 237 238 239 240 241 242 243 244 ... 445 446

Kommentare zu diesen Handbüchern

Keine Kommentare

Avaya BCM 2.0 Programming Betriebsanweisung Seite 239

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Gateways / Controller Avaya BCM 2.0 Programming